Уведомление безопасности DSA-1684

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Debian

liblcms1 (any) liblcms1-dev (any) liblcms-utils (any)

Уведомление безопасности об уязвимостях liblcms1-dev, liblcms-utils, liblcms1

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
liblcms1-dev - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
s390x:
liblcms1-dev - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
i686:
liblcms1 - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
liblcms1-dev - 1.15-1.1+etch1
arm:
liblcms1 - 1.15-1.1+etch1
liblcms1-dev - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
sparc:
liblcms1-dev - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
x86-64:
liblcms-utils - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
liblcms1-dev - 1.15-1.1+etch1
alpha:
liblcms1-dev - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
ia64:
liblcms1-dev - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
mips:
liblcms-utils - 1.15-1.1+etch1
liblcms1-dev - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1
mipsel:
liblcms1 - 1.15-1.1+etch1
liblcms1-dev - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
hppa:
liblcms1-dev - 1.15-1.1+etch1
liblcms-utils - 1.15-1.1+etch1
liblcms1 - 1.15-1.1+etch1

http://www.debian.org/security/dsa-1684/

Источник: CVE
Наименование: CVE-2008-5316
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5316

Источник: CVE
Наименование: CVE-2008-5317
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5317