Summary
USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the
fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Little CMS incorrectly handled certain malformed ICC
profiles. An attacker could use this issue to cause Little CMS to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | lcms2 | 2.5-0ubuntu4.2+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | lcms2 | 2.6-3ubuntu2.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | lcms2 | 2.9-1ubuntu0.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | lcms2 | 2.9-4ubuntu0.1~esm1 |
Vulnerabilities 1
-
Medium 4.0
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed…
References
-
report
https://ubuntu.com/security/CVE-2026-41254