[ubuntu/jammy-updates] lcms2 2.12~rc1-2ubuntu0.1 (Accepted)

[Ubuntu Archive Robot]

lcms2 (2.12~rc1-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: nteger overflow in CubeSize
    - debian/patches/CVE-2026-41254-pre1.patch: fix a bounds check in
      src/cmslut.c.
    - debian/patches/CVE-2026-41254-pre2.patch: prevent allocating a big
      chunk of memory on corrupted LUT in src/cmslut.c.
    - debian/patches/CVE-2026-41254-1.patch: fix integer overflow in
      CubeSize() in src/cmslut.c.
    - debian/patches/CVE-2026-41254-2.patch: check for overflow in
      src/cmslut.c.
    - CVE-2026-41254

Date: 2026-04-21 13:13:10.621740+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/lcms2/2.12~rc1-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.