Bug 591452 – <media-libs/lcms-2.8-r1: Out-of-bounds read in Type_MLU_Read() (CVE-2016-10165)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2016-08-17 11:43:10 UTC]

From ${URL} :

An out-of-bounds read in cmstypes.c in Type_MLU_Read function was found, leading to heap memory leak triggered by crafted ICC profile.

Upstream patch:

https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e2

CVE request:

http://seclists.org/oss-sec/2016/q3/288


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Thomas Deutschmann (RETIRED) 2017-01-26 16:00:34 UTC]

lcms is bundled in various OpenJDK releases, we will need to check that.

[Comment 2 Andreas K. Hüttel 2017-01-27 21:05:53 UTC]

Added the patch. Testing now.

[Comment 3 Andreas K. Hüttel 2017-02-19 17:57:14 UTC]

(In reply to Andreas K. Hüttel from comment #2)
> Added the patch. Testing now.

I see no bug explosion, so let's go ahead. 

Arches please stabilize, target: all stable arches

=media-libs/lcms-2.8-r1

[Comment 4 Agostino Sarubbo 2017-02-20 10:07:12 UTC]

amd64 stable

[Comment 5 Tobias Klausmann (RETIRED) 2017-02-21 11:54:59 UTC]

Stable on alpha.

[Comment 6 Jeroen Roovers (RETIRED) 2017-02-22 08:08:25 UTC]

Stable for HPPA.

[Comment 7 Agostino Sarubbo 2017-02-22 16:08:22 UTC]

x86 stable

[Comment 8 Michael Weber (RETIRED) 2017-02-22 21:26:27 UTC]

arm ppc64 stable.

[Comment 9 Michael Weber (RETIRED) 2017-02-22 21:59:10 UTC]

ppc stable

[Comment 10 Agostino Sarubbo 2017-02-25 10:04:31 UTC]

sparc stable

[Comment 11 Agostino Sarubbo 2017-03-11 17:10:43 UTC]

ia64 stable.

Maintainer(s), please cleanup.
Security, please vote.

[Comment 12 Andreas K. Hüttel 2017-03-11 18:07:48 UTC]

Vulnerable versions removed

[Comment 13 Thomas Deutschmann (RETIRED) 2017-03-14 11:14:53 UTC]

GLSA Vote: No

Repository is clean, all done.