Security update for lcms2 SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:0336-1 Final 1 1 2017-01-31T08:13:56Z current 2017-01-31T08:13:56Z 2017-01-31T08:13:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for lcms2 This update for lcms2 to version 2.8 fixes the following issues: This security issue was fixed: - Fixed an out-of-bounds heap read in Type_MLU_Read that could be triggered by an untrusted image with a crafted ICC profile (boo#1021364). These non-security issues were fixed: * Fixed many typos in comments, thanks to Stefan Weil for doing that. * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile. * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail. * Added some extra checks to the tools and examples. * Fix a bug that prevented to read luminance tag * BIG amount of functionality contributed/Sponsored by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well. * added an extra _ to _stdcall to make it more portable * Fixed a bug in transicc for named color profiles * Fixed several compiler warnings * Added support for Visual Studio 2015 * Fixed for XCODE project * Update to GNOME 3.20 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2017-01/msg00174.html E-Mail link for openSUSE-SU-2017:0336-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 lcms2-2.8-3.1 liblcms2-2-2.8-3.1 liblcms2-2-32bit-2.8-3.1 liblcms2-devel-2.8-3.1 liblcms2-devel-32bit-2.8-3.1 liblcms2-doc-2.8-3.1 lcms2-2.8-3.1 as a component of openSUSE Leap 42.1 liblcms2-2-2.8-3.1 as a component of openSUSE Leap 42.1 liblcms2-2-32bit-2.8-3.1 as a component of openSUSE Leap 42.1 liblcms2-devel-2.8-3.1 as a component of openSUSE Leap 42.1 liblcms2-devel-32bit-2.8-3.1 as a component of openSUSE Leap 42.1 liblcms2-doc-2.8-3.1 as a component of openSUSE Leap 42.1