BID:34185

Little CMS Memory Leak and Multiple Memory Corruption Vulnerabilities

Info

Little CMS Memory Leak and Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	34185
Class:	Boundary Condition Error
CVE:	CVE-2009-0581 CVE-2009-0723 CVE-2009-0733
Remote:	Yes
Local:	No
Published:	Mar 19 2009 12:00AM
Updated:	Apr 13 2015 10:13PM
Credit:	Chris Evans from the Google Security Team
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Sun OpenJDK 6 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Pardus Linux 2008 0 Mozilla Firefox 3.1 Beta 3 Mozilla Firefox 3.1 Beta 2 Mozilla Firefox 3.1 Beta 1 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Little CMS Little CMS 1.17 Little CMS Little CMS 1.16 Little CMS Little CMS 1.15 Little CMS Little CMS 1.14 Little CMS Little CMS 1.13 Little CMS Little CMS 1.12 Little CMS Little CMS 1.11 Little CMS Little CMS 1.10 Little CMS Little CMS 1.09 Little CMS Little CMS 1.08 Little CMS Little CMS 1.07 GIMP GIMP 2.6.6 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0

Not Vulnerable:	Little CMS Little CMS 1.18beta2

Discussion

Little CMS Memory Leak and Multiple Memory Corruption Vulnerabilities

Little CMS is prone to a denial-of-service vulnerability and multiple memory-corruption vulnerabilities because it fails to perform adequate checks on user-supplied input.

Attackers may leverage these issues to execute arbitrary code in the context of the application or launch denial-of-service attacks.

Versions prior to Little CMS 1.18beta2 are vulnerable.

NOTE: Other applications that use Little CMS (such as Mozilla Firefox, OpenJDK, and GIMP) are vulnerable to these issues as well.

Exploit / POC

Little CMS Memory Leak and Multiple Memory Corruption Vulnerabilities

The researcher responsible for discovering these issues has reportedly developed exploit code. This exploit has not been publicly released and we are not aware of any other publicly available working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Little CMS Memory Leak and Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Ubuntu Ubuntu Linux 7.10 powerpc

Ubuntu liblcms-utils_1.16-5ubuntu3.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-5ubuntu3.2_powerpc.deb

Ubuntu liblcms1-dev_1.16-5ubuntu3.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-5 ubuntu3.2_powerpc.deb

Ubuntu liblcms1_1.16-5ubuntu3.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-5ubun tu3.2_powerpc.deb

Ubuntu python-liblcms_1.16-5ubuntu3.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-5ubuntu3.2_powerpc.deb

Little CMS Little CMS 1.10

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Debian Linux 5.0 ia-64

Debian liblcms-utils_1.17.dfsg-1+lenny1_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_ia64.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_ia64.deb

Debian liblcms1_1.17.dfsg-1+lenny1_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_ia64.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_ia64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_ia64.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_ia64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_ia64.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_ia64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_ia64.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_ia64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_ia64.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_ia64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_ia64.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_ia64.deb

Little CMS Little CMS 1.17

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Ubuntu Ubuntu Linux 8.04 LTS powerpc

Ubuntu liblcms-utils_1.16-7ubuntu1.2_powerpc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-7ubunt u1.2_powerpc.deb

Ubuntu liblcms1-dev_1.16-7ubuntu1.2_powerpc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-7ubuntu1.2_ powerpc.deb

Ubuntu liblcms1_1.16-7ubuntu1.2_powerpc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-7ubuntu1.2_powe rpc.deb

Ubuntu python-liblcms_1.16-7ubuntu1.2_powerpc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-7ubun tu1.2_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

Ubuntu liblcms-utils_1.16-10ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-10ubun tu0.2_powerpc.deb

Ubuntu liblcms1-dev_1.16-10ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-10ubuntu0.2 _powerpc.deb

Ubuntu liblcms1_1.16-10ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-10ubuntu0.2_pow erpc.deb

Ubuntu python-liblcms_1.16-10ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-10ubu ntu0.2_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

Ubuntu liblcms-utils_1.16-7ubuntu1.2_sparc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-7ubunt u1.2_sparc.deb

Ubuntu liblcms1-dev_1.16-7ubuntu1.2_sparc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-7ubuntu1.2_ sparc.deb

Ubuntu liblcms1_1.16-7ubuntu1.2_sparc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-7ubuntu1.2_spar c.deb

Ubuntu python-liblcms_1.16-7ubuntu1.2_sparc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-7ubun tu1.2_sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

Ubuntu liblcms-utils_1.13-1ubuntu0.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .13-1ubuntu0.2_sparc.deb

Ubuntu liblcms1-dev_1.13-1ubuntu0.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.13-1 ubuntu0.2_sparc.deb

Ubuntu liblcms1_1.13-1ubuntu0.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.13-1ubun tu0.2_sparc.deb

Debian Linux 5.0 alpha

Debian liblcms-utils_1.17.dfsg-1+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_alpha.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_alpha.deb

Debian liblcms1_1.17.dfsg-1+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_alpha.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_alpha.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_alpha.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_alpha.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_alpha.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_alpha.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_alpha.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_alpha.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_alpha.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_alpha.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_alpha.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_alpha.deb

Mandriva Linux Mandrake 2008.0 x86_64

Mandriva lcms-1.18-0.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms-devel-1.18-0.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms1-1.18-0.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-0.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

Ubuntu liblcms-utils_1.16-7ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-7ubuntu1.2_amd64.deb

Ubuntu liblcms1-dev_1.16-7ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-7 ubuntu1.2_amd64.deb

Ubuntu liblcms1_1.16-7ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-7ubun tu1.2_amd64.deb

Ubuntu python-liblcms_1.16-7ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-7ubuntu1.2_amd64.deb

Little CMS Little CMS 1.14

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Mandriva Linux Mandrake 2008.0

Mandriva lcms-1.18-0.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms-devel-1.18-0.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms1-1.18-0.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-0.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 7.10 sparc

Ubuntu liblcms-utils_1.16-5ubuntu3.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-5ubuntu3.2_sparc.deb

Ubuntu liblcms1-dev_1.16-5ubuntu3.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-5 ubuntu3.2_sparc.deb

Ubuntu liblcms1_1.16-5ubuntu3.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-5ubun tu3.2_sparc.deb

Ubuntu python-liblcms_1.16-5ubuntu3.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-5ubuntu3.2_sparc.deb

Debian Linux 5.0 mipsel

Debian liblcms-utils_1.17.dfsg-1+lenny1_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_mipsel.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_mipsel.deb

Debian liblcms1_1.17.dfsg-1+lenny1_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_mipsel.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_mipsel.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_mipsel.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_mipsel.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_mipsel.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_mipsel.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_mipsel.deb

Debian Linux 4.0 amd64

Debian liblcms-utils_1.15-1.1+etch2_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_amd64.deb

Debian liblcms1-dev_1.15-1.1+etch2_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_amd64.deb

Debian liblcms1_1.15-1.1+etch2_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_amd64.deb

Debian Linux 4.0 ia-32

Debian liblcms-utils_1.15-1.1+etch2_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_i386.deb

Debian liblcms1-dev_1.15-1.1+etch2_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_i386.deb

Debian liblcms1_1.15-1.1+etch2_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_i386.deb

Debian Linux 4.0 hppa

Debian liblcms-utils_1.15-1.1+etch2_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_hppa.deb

Debian liblcms1-dev_1.15-1.1+etch2_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_hppa.deb

Debian liblcms1_1.15-1.1+etch2_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_hppa.deb

Little CMS Little CMS 1.07

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Ubuntu Ubuntu Linux 8.10 sparc

Ubuntu liblcms-utils_1.16-10ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-10ubun tu0.2_sparc.deb

Ubuntu liblcms1-dev_1.16-10ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-10ubuntu0.2 _sparc.deb

Ubuntu liblcms1_1.16-10ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-10ubuntu0.2_spa rc.deb

Ubuntu python-liblcms_1.16-10ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-10ubu ntu0.2_sparc.deb

Debian Linux 5.0 armel

Debian liblcms-utils_1.17.dfsg-1+lenny1_armel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_armel.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_armel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_armel.deb

Debian liblcms1_1.17.dfsg-1+lenny1_armel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_armel.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_armel.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_armel.deb

Debian Linux 5.0

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Little CMS Little CMS 1.15

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Debian Linux 4.0 mipsel

Debian liblcms-utils_1.15-1.1+etch2_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_mipsel.deb

Debian liblcms1-dev_1.15-1.1+etch2_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_mipsel.deb

Debian liblcms1_1.15-1.1+etch2_mipsel.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_mipsel.deb

Mandriva Linux Mandrake 2009.0 x86_64

Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lcms-1.18-0.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms-devel-1.18-0.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms1-1.18-0.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-0.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-demo-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-javadoc-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-manual-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

Debian liblcms-utils_1.17.dfsg-1+lenny1_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_mips.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_mips.deb

Debian liblcms1_1.17.dfsg-1+lenny1_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_mips.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_mips.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_mips.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_mips.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_mips.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_mips.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_mips.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_mips.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_mips.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_mips.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_mips.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_mips.deb

Little CMS Little CMS 1.13

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Mandriva Linux Mandrake 2009.1

Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.2mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.2mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.2mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.2mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.2mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.2mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva lcms-1.18-1.1mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms-devel-1.18-1.1mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms1-1.18-1.1mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-1.1mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-demo-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-javadoc-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-manual-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 amd64

Ubuntu liblcms-utils_1.16-10ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-10ubuntu0.2_amd64.deb

Ubuntu liblcms1-dev_1.16-10ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-1 0ubuntu0.2_amd64.deb

Ubuntu liblcms1_1.16-10ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-10ubu ntu0.2_amd64.deb

Ubuntu python-liblcms_1.16-10ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-10ubuntu0.2_amd64.deb

Debian Linux 4.0 ia-64

Debian liblcms-utils_1.15-1.1+etch2_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_ia64.deb

Debian liblcms1-dev_1.15-1.1+etch2_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_ia64.deb

Debian liblcms1_1.15-1.1+etch2_ia64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_ia64.deb

Debian Linux 4.0 mips

Debian liblcms-utils_1.15-1.1+etch2_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_mips.deb

Debian liblcms1-dev_1.15-1.1+etch2_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_mips.deb

Debian liblcms1_1.15-1.1+etch2_mips.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_mips.deb

Debian Linux 5.0 sparc

Debian liblcms-utils_1.17.dfsg-1+lenny1_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_sparc.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_sparc.deb

Debian liblcms1_1.17.dfsg-1+lenny1_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_sparc.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_sparc.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_sparc.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_sparc.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_sparc.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_sparc.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_sparc.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_sparc.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_sparc.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_sparc.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_sparc.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_sparc.deb

Little CMS Little CMS 1.08

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Mandriva Linux Mandrake 2008.1 x86_64

Mandriva lcms-1.18-0.1mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms-devel-1.18-0.1mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms1-1.18-0.1mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-0.1mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

Debian liblcms-utils_1.15-1.1+etch2_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_arm.deb

Debian liblcms1-dev_1.15-1.1+etch2_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_arm.deb

Debian liblcms1_1.15-1.1+etch2_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_arm.deb

Mandriva Linux Mandrake 2008.1

Mandriva lcms-1.18-0.1mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms-devel-1.18-0.1mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms1-1.18-0.1mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-0.1mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.2mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.2mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.2mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.2mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.2mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.2mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lcms-1.18-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms-devel-1.18-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms1-1.18-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-demo-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-javadoc-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-manual-1.7-0.0.3.1mdv2009.1.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

Debian liblcms-utils_1.15-1.1+etch2_powerpc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_powerpc.deb

Debian liblcms1-dev_1.15-1.1+etch2_powerpc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_powerpc.deb

Debian liblcms1_1.15-1.1+etch2_powerpc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

Ubuntu liblcms-utils_1.16-10ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-10ubuntu0.2_i386.deb

Ubuntu liblcms1-dev_1.16-10ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-1 0ubuntu0.2_i386.deb

Ubuntu liblcms1_1.16-10ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-10ubu ntu0.2_i386.deb

Ubuntu python-liblcms_1.16-10ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-10ubuntu0.2_i386.deb

Little CMS Little CMS 1.11

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

MandrakeSoft Enterprise Server 5 x86_64

Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.3mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.3mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.3mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.3mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.3mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.3mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-demo-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-javadoc-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-manual-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-32

Debian liblcms-utils_1.17.dfsg-1+lenny1_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_i386.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_i386.deb

Debian liblcms1_1.17.dfsg-1+lenny1_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_i386.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_i386.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_i386.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_i386.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_i386.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_i386.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_i386.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_i386.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_i386.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_i386.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_i386.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_i386.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

Ubuntu liblcms-utils_1.13-1ubuntu0.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .13-1ubuntu0.2_powerpc.deb

Ubuntu liblcms1-dev_1.13-1ubuntu0.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.13-1 ubuntu0.2_powerpc.deb

Ubuntu liblcms1_1.13-1ubuntu0.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.13-1ubun tu0.2_powerpc.deb

MandrakeSoft Enterprise Server 5

Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.3mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.3mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.3mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.3mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.3mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.3mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-demo-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-javadoc-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-manual-1.7-0.0.2.2mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

Debian liblcms-utils_1.17.dfsg-1+lenny1_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_s390.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_s390.deb

Debian liblcms1_1.17.dfsg-1+lenny1_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_s390.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu liblcms-utils_1.16-7ubuntu1.2_lpia.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-7ubunt u1.2_lpia.deb

Ubuntu liblcms1-dev_1.16-7ubuntu1.2_lpia.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-7ubuntu1.2_ lpia.deb

Ubuntu liblcms1_1.16-7ubuntu1.2_lpia.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-7ubuntu1.2_lpia .deb

Ubuntu python-liblcms_1.16-7ubuntu1.2_lpia.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-7ubun tu1.2_lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

Ubuntu liblcms-utils_1.16-5ubuntu3.2_lpia.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-5ubunt u3.2_lpia.deb

Ubuntu liblcms1-dev_1.16-5ubuntu3.2_lpia.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-5ubuntu3.2_ lpia.deb

Ubuntu liblcms1_1.16-5ubuntu3.2_lpia.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-5ubuntu3.2_lpia .deb

Ubuntu python-liblcms_1.16-5ubuntu3.2_lpia.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-5ubun tu3.2_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu liblcms-utils_1.13-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .13-1ubuntu0.2_i386.deb

Ubuntu liblcms1-dev_1.13-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.13-1 ubuntu0.2_i386.deb

Ubuntu liblcms1_1.13-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.13-1ubun tu0.2_i386.deb

Ubuntu Ubuntu Linux 7.10 i386

Ubuntu liblcms-utils_1.16-5ubuntu3.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-5ubuntu3.2_i386.deb

Ubuntu liblcms1-dev_1.16-5ubuntu3.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-5 ubuntu3.2_i386.deb

Ubuntu liblcms1_1.16-5ubuntu3.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-5ubun tu3.2_i386.deb

Ubuntu python-liblcms_1.16-5ubuntu3.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-5ubuntu3.2_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

Ubuntu liblcms-utils_1.16-10ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-10ubun tu0.2_lpia.deb

Ubuntu liblcms1-dev_1.16-10ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-10ubuntu0.2 _lpia.deb

Ubuntu liblcms1_1.16-10ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-10ubuntu0.2_lpi a.deb

Ubuntu python-liblcms_1.16-10ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-10ubu ntu0.2_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

Ubuntu liblcms-utils_1.13-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .13-1ubuntu0.2_amd64.deb

Ubuntu liblcms1-dev_1.13-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.13-1 ubuntu0.2_amd64.deb

Ubuntu liblcms1_1.13-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.13-1ubun tu0.2_amd64.deb

Debian Linux 5.0 hppa

Debian liblcms-utils_1.17.dfsg-1+lenny1_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_hppa.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_hppa.deb

Debian liblcms1_1.17.dfsg-1+lenny1_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_hppa.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_hppa.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_hppa.deb

Debian Linux 4.0 sparc

Debian liblcms-utils_1.15-1.1+etch2_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_sparc.deb

Debian liblcms1-dev_1.15-1.1+etch2_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_sparc.deb

Debian liblcms1_1.15-1.1+etch2_sparc.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_sparc.deb

Debian Linux 4.0 s/390

Debian liblcms-utils_1.15-1.1+etch2_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_s390.deb

Debian liblcms1-dev_1.15-1.1+etch2_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_s390.deb

Debian liblcms1_1.15-1.1+etch2_s390.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_s390.deb

Debian Linux 5.0 m68k

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian Linux 5.0 arm

Debian liblcms-utils_1.17.dfsg-1+lenny1_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_arm.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_arm.deb

Debian liblcms1_1.17.dfsg-1+lenny1_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_arm.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_arm.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_arm.deb

Mandriva Linux Mandrake 2009.0

Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.2mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.2mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.2mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.2mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.2mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.2mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva lcms-1.18-0.1mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms-devel-1.18-0.1mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms1-1.18-0.1mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva python-lcms-1.18-0.1mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-demo-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-javadoc-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Mandriva rhino-manual-1.7-0.0.2.1mdv2009.0.noarch.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 alpha

Debian liblcms-utils_1.15-1.1+etch2_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.15 -1.1+etch2_alpha.deb

Debian liblcms1-dev_1.15-1.1+etch2_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.15- 1.1+etch2_alpha.deb

Debian liblcms1_1.15-1.1+etch2_alpha.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.15-1.1+ etch2_alpha.deb

Ubuntu Ubuntu Linux 7.10 amd64

Ubuntu liblcms-utils_1.16-5ubuntu3.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-5ubuntu3.2_amd64.deb

Ubuntu liblcms1-dev_1.16-5ubuntu3.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-5 ubuntu3.2_amd64.deb

Ubuntu liblcms1_1.16-5ubuntu3.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-5ubun tu3.2_amd64.deb

Ubuntu python-liblcms_1.16-5ubuntu3.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-5ubuntu3.2_amd64.deb

MandrakeSoft Corporate Server 4.0

Mandriva liblcms1-1.14-1.2.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms1-devel-1.14-1.2.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Little CMS Little CMS 1.09

Little CMS lcms-1.18beta2.zip
http://www.littlecms.com/lcms-1.18beta2.zip

Ubuntu Ubuntu Linux 8.04 LTS i386

Ubuntu liblcms-utils_1.16-7ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-7ubuntu1.2_i386.deb

Ubuntu liblcms1-dev_1.16-7ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-7 ubuntu1.2_i386.deb

Ubuntu liblcms1_1.16-7ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-7ubun tu1.2_i386.deb

Ubuntu python-liblcms_1.16-7ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-7ubuntu1.2_i386.deb

Debian Linux 5.0 amd64

Debian liblcms-utils_1.17.dfsg-1+lenny1_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms-utils_1.17 .dfsg-1+lenny1_amd64.deb

Debian liblcms1-dev_1.17.dfsg-1+lenny1_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1-dev_1.17. dfsg-1+lenny1_amd64.deb

Debian liblcms1_1.17.dfsg-1+lenny1_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/liblcms1_1.17.dfsg -1+lenny1_amd64.deb

Debian openjdk-6-dbg_6b11-9.1+lenny2_amd64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dbg _6b11-9.1+lenny2_amd64.deb

Debian openjdk-6-demo_6b11-9.1+lenny2_amd64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-dem o_6b11-9.1+lenny2_amd64.deb

Debian openjdk-6-doc_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-doc _6b11-9.1+lenny2_all.deb

Debian openjdk-6-jdk_6b11-9.1+lenny2_amd64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jdk _6b11-9.1+lenny2_amd64.deb

Debian openjdk-6-jre-headless_6b11-9.1+lenny2_amd64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -headless_6b11-9.1+lenny2_amd64.deb

Debian openjdk-6-jre-lib_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre -lib_6b11-9.1+lenny2_all.deb

Debian openjdk-6-jre_6b11-9.1+lenny2_amd64.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-jre _6b11-9.1+lenny2_amd64.deb

Debian openjdk-6-source_6b11-9.1+lenny2_all.deb
http://security.debian.org/pool/updates/main/o/openjdk-6/openjdk-6-sou rce_6b11-9.1+lenny2_all.deb

Debian python-liblcms_1.17.dfsg-1+lenny1_amd64.deb
http://security.debian.org/pool/updates/main/l/lcms/python-liblcms_1.1 7.dfsg-1+lenny1_amd64.deb

MandrakeSoft Corporate Server 3.0

Mandriva liblcms1-1.10-1.2.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

Mandriva liblcms1-devel-1.10-1.2.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

Mandriva lib64lcms1-1.10-1.2.C30mdk.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64lcms1-devel-1.10-1.2.C30mdk.x86_64.rpm
http://www.mandriva.com/en/download/

References

Little CMS Memory Leak and Multiple Memory Corruption Vulnerabilities

References:

CESA-2009-003 - rev 2 (Chris Evans)
Little CMS Project Page (Little CMS)
LittleCMS vulnerabilities (Chris Evans)
LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted) (Chris Evans )