ELSA-2009-0339

ELSA-2009-0339 - lcms security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2009-03-19

Description

[1.18-beta1.1.el5_3.2]
- Add patch theoretically preventing division by zero

[1.18-beta1.1.el5_3.1]
- Rebase to upstream 1.18beta1
- CVE-2009-0581 LittleCms memory leak
- CVE-2009-0723 LittleCms integer overflow
- CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
- Resolves: #487513

Related CVEs

CVE-2009-0581

CVE-2009-0723

CVE-2009-0733

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	lcms-1.18-0.1.beta1.el5_3.2.src.rpm	891b8136e165bfebc3e5245415e11206	-
	lcms-1.18-0.1.beta1.el5_3.2.i386.rpm	3faa5047f1435b5199317f67a1a63857	-
	lcms-devel-1.18-0.1.beta1.el5_3.2.i386.rpm	d986557b12f6e249dd12edd08c7ca71a	-
	python-lcms-1.18-0.1.beta1.el5_3.2.i386.rpm	7978c5c8fa3e25b7076d7ea99ef22bc8	-
Oracle Linux 5 (ia64)	lcms-1.18-0.1.beta1.el5_3.2.src.rpm	891b8136e165bfebc3e5245415e11206	-
	lcms-1.18-0.1.beta1.el5_3.2.i386.rpm	3faa5047f1435b5199317f67a1a63857	-
	lcms-1.18-0.1.beta1.el5_3.2.ia64.rpm	b4e7200bbe660a1ccc46852621954288	-
	lcms-devel-1.18-0.1.beta1.el5_3.2.ia64.rpm	bd4eea45c8b7a53e3187c97bd45b69be	-
	python-lcms-1.18-0.1.beta1.el5_3.2.ia64.rpm	929e741b48110e1453f74832385a12b9	-
Oracle Linux 5 (x86_64)	lcms-1.18-0.1.beta1.el5_3.2.src.rpm	891b8136e165bfebc3e5245415e11206	-
	lcms-1.18-0.1.beta1.el5_3.2.i386.rpm	3faa5047f1435b5199317f67a1a63857	-
	lcms-1.18-0.1.beta1.el5_3.2.x86_64.rpm	6c1f148c904b6cc8a5c094ed2a109220	-
	lcms-devel-1.18-0.1.beta1.el5_3.2.i386.rpm	d986557b12f6e249dd12edd08c7ca71a	-
	lcms-devel-1.18-0.1.beta1.el5_3.2.x86_64.rpm	2a273aff44f200b7936027a637ba5f95	-
	python-lcms-1.18-0.1.beta1.el5_3.2.x86_64.rpm	af34b29979311c7aac928e1f36836504	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team