ELSA-2009-0011

ELSA-2009-0011 - lcms security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2009-01-07

Description

[1.15-1.2.2.el5_2.2]
- Fix Requires to ensure subpackages match the parent package

[1.15-1.2.2.el5_2.1]
- Fix insufficient input validation in ReadEmbeddedTextTag
- Fix unsigned -> signed integer cast issue in cmsAllocGamma
- Resolves: #473469

Related CVEs

CVE-2008-5316

CVE-2008-5317

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	lcms-1.15-1.2.2.el5_2.2.src.rpm	c691ddbae96398cbe6c63d45afc407323922d8969b84c60b4a4df7b51f1b66e2	ELSA-2009-0339	el5_u2_i386_patch
	lcms-1.15-1.2.2.el5_2.2.i386.rpm	3ce08f90123fa0ff479afd79d458e8b5211f87ea19c3f360d900a74ed8345946	ELSA-2009-0339	el5_u2_i386_patch
	lcms-devel-1.15-1.2.2.el5_2.2.i386.rpm	695fd98b99bcbf0f4a1e9e38bf56ba305afa5c671fa9e9c192ffc926772166fc	ELSA-2009-0339	el5_u2_i386_patch
	python-lcms-1.15-1.2.2.el5_2.2.i386.rpm	248d747e679471edf275b7aec5d017c186f4274e19c59b920da3a59662094469	ELSA-2009-0339	el5_u2_i386_patch
Oracle Linux 5 (x86_64)	lcms-1.15-1.2.2.el5_2.2.src.rpm	c691ddbae96398cbe6c63d45afc407323922d8969b84c60b4a4df7b51f1b66e2	ELSA-2009-0339	el5_u2_x86_64_patch
	lcms-1.15-1.2.2.el5_2.2.i386.rpm	3ce08f90123fa0ff479afd79d458e8b5211f87ea19c3f360d900a74ed8345946	ELSA-2009-0339	el5_u2_x86_64_patch
	lcms-1.15-1.2.2.el5_2.2.x86_64.rpm	5eadffd9425296df719b27d789afbedfea63d230a91413ca0e57f3a332f8554f	ELSA-2009-0339	el5_u2_x86_64_patch
	lcms-devel-1.15-1.2.2.el5_2.2.i386.rpm	695fd98b99bcbf0f4a1e9e38bf56ba305afa5c671fa9e9c192ffc926772166fc	ELSA-2009-0339	el5_u2_x86_64_patch
	lcms-devel-1.15-1.2.2.el5_2.2.x86_64.rpm	d5d193d7054290042d05477dfbe588e758c095b25797c5e04cb668023683bc5b	ELSA-2009-0339	el5_u2_x86_64_patch
	python-lcms-1.15-1.2.2.el5_2.2.x86_64.rpm	839f2b1c3113ea86a382cb2f356dcc6303da37ceb5c9a7fe89f7e7482d1ed067	ELSA-2009-0339	el5_u2_x86_64_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team