Information on source package lcms2

Available versions

ReleaseVersion
bullseye2.12~rc1-2
bookworm2.14-2
trixie2.16-2
forky2.17-1
sid2.17-1

Open issues

BugbullseyebookwormtrixieforkysidDescription
CVE-2026-41254vulnerablevulnerablevulnerablevulnerablevulnerableLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in ...

Open unimportant issues

BugbullseyebookwormtrixieforkysidDescription
CVE-2025-29070vulnerablevulnerablevulnerablevulnerablevulnerableA heap buffer overflow vulnerability has been identified in thesmooth2 ...

Resolved issues

BugDescription
CVE-2018-16435Little CMS (aka Little Color Management System) 2.9 has an integer ove ...
CVE-2016-10165The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) all ...
CVE-2014-0459Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Em ...
CVE-2013-7455Double free vulnerability in the DefaultICCintents function in cmscnvr ...
CVE-2013-4276Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcm ...
CVE-2013-4160Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other ...

Security announcements

DSA / DLADescription
DLA-1496-1lcms2 - security update
DSA-4284-1lcms2 - security update
DSA-3774-1lcms2 - security update
DLA-803-1lcms2 - security update
Search for package or bug name: Reporting problems