{"id":"CVE-2018-16435","aliases":["ALPINE-CVE-2018-16435","AZL-44076","BELL-CVE-2018-16435","DEBIAN-CVE-2018-16435","DLA-1496-1","DSA-4284-1","DSA-4289-1","EUVD-2018-8275","GHSA-2w2q-grxm-gr8f","JLSEC-2026-490","MGASA-2018-0387","RHSA-2018:3004","SUSE-SU-2018:3498-1","SUSE-SU-2018:3545-1","SUSE-SU-2019:0049-1","SUSE-SU-2019:0049-2","SUSE-SU-2019:0057-1","SUSE-SU-2019:0057-2","SUSE-SU-2019:0058-1","UBUNTU-CVE-2018-16435","USN-3770-1","openSUSE-SU-2019:0043-1","openSUSE-SU-2024:10876-1","openSUSE-SU-2024:10910-1"],"status":"published","title":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the...","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0174,"percentile":0.77892,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-787"],"published":"2018-09-03T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"lcms2","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openjdk8","fixed_in":["8.191.12-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"lcms2","fixed_in":["2.9-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lcms2","fixed_in":["2.9-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lcms2","fixed_in":["2.9-3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"lcms2","fixed_in":["2.6-3+deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"lcms2","fixed_in":["2.8-4+deb9u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LittleCMS_jll","fixed_in":["2.12.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"lcms2","fixed_in":["2.8-2.1.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"lcms2","fixed_in":["2.9-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"lcms2","fixed_in":["2.5-0ubuntu4.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","fixed_in":["69.0.3497.81-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"lcms2","fixed_in":["2.6-3ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"chromium-browser","fixed_in":["69.0.3497.81-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"lcms2","fixed_in":["2.9-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"lcms2","fixed_in":["2.12-1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.191.12-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-3+deb8u2"}]}],"versions":["2.6-3","2.6-3+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-4+deb9u1"}]}],"versions":["2.8-4"]},{"source":"osv","ecosystem":"Debian:9","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"69.0.3497.81-1~deb9u1"}]}],"versions":["59.0.3071.104-1","59.0.3071.86-1","60.0.3112.72-1","60.0.3112.78-1","60.0.3112.78-1~deb9u1","61.0.3163.100-1","61.0.3163.100-1~deb9u1","61.0.3163.100-2","62.0.3202.75-1","62.0.3202.75-1~deb9u1","62.0.3202.89-1","62.0.3202.89-1~deb9u1","63.0.3239.30-1","63.0.3239.40-1","63.0.3239.84-1","63.0.3239.84-1~deb9u1","64.0.3282.119-1","64.0.3282.119-1~deb9u1","64.0.3282.119-2","65.0.3325.146-1","65.0.3325.146-2","65.0.3325.146-3","65.0.3325.146-4","65.0.3325.73-1","65.0.3325.74-1","66.0.3359.117-1","66.0.3359.117-1~deb9u1","66.0.3359.139-1","66.0.3359.181-1","66.0.3359.22-1","66.0.3359.22-2","66.0.3359.22-3","66.0.3359.26-1","66.0.3359.26-2","67.0.3396.48-1","67.0.3396.56-1","67.0.3396.57-1","67.0.3396.62-1","67.0.3396.62-2","67.0.3396.79-1","67.0.3396.79-2","67.0.3396.87-1","67.0.3396.87-1~deb9u1","68.0.3440.17-1","68.0.3440.25-1","68.0.3440.33-1","68.0.3440.42-1","68.0.3440.7-1","68.0.3440.75-1","68.0.3440.75-1~deb9u1","68.0.3440.75-2","69.0.3497.12-1"],"bundled":25},{"source":"osv","ecosystem":"Julia","package":"LittleCMS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.12.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-2.1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:70.0.3538.67-1.el6_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:70.0.3538.67-1.el6_10"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-9.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-9.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-9.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-9.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.201-43.18.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-27.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-3.13.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-3.13.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-0ubuntu4.2"}]}],"versions":["2.5-0ubuntu1","2.5-0ubuntu2","2.5-0ubuntu3","2.5-0ubuntu4","2.5-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"69.0.3497.81-0ubuntu0.16.04.1"}]}],"versions":["45.0.2454.101-0ubuntu1.1201","47.0.2526.73-0ubuntu1.1218","47.0.2526.106-0ubuntu1.1221","48.0.2564.82-0ubuntu1.1222","48.0.2564.116-0ubuntu1.1229","49.0.2623.87-0ubuntu1.1232","49.0.2623.108-0ubuntu1.1233","50.0.2661.102-0ubuntu0.16.04.1.1237","51.0.2704.79-0ubuntu0.16.04.1.1242","52.0.2743.116-0ubuntu0.16.04.1.1250","53.0.2785.143-0ubuntu0.16.04.1.1254","53.0.2785.143-0ubuntu0.16.04.1.1257","55.0.2883.87-0ubuntu0.16.04.1263","56.0.2924.76-0ubuntu0.16.04.1268","57.0.2987.98-0ubuntu0.16.04.1276","58.0.3029.81-0ubuntu0.16.04.1277","58.0.3029.96-0ubuntu0.16.04.1279","58.0.3029.110-0ubuntu0.16.04.1281","59.0.3071.109-0ubuntu0.16.04.1289","59.0.3071.109-0ubuntu0.16.04.1291","60.0.3112.78-0ubuntu0.16.04.1293","60.0.3112.113-0ubuntu0.16.04.1298","61.0.3163.79-0ubuntu0.16.04.1300","61.0.3163.100-0ubuntu0.16.04.1306","62.0.3202.62-0ubuntu0.16.04.1308","62.0.3202.75-0ubuntu0.16.04.1313","62.0.3202.89-0ubuntu0.16.04.1315","62.0.3202.94-0ubuntu0.16.04.1317","63.0.3239.84-0ubuntu0.16.04.1","63.0.3239.132-0ubuntu0.16.04.1","64.0.3282.119-0ubuntu0.16.04.1","64.0.3282.140-0ubuntu0.16.04.1","64.0.3282.167-0ubuntu0.16.04.1","65.0.3325.181-0ubuntu0.16.04.1","66.0.3359.139-0ubuntu0.16.04.3","66.0.3359.181-0ubuntu0.16.04.1","67.0.3396.99-0ubuntu0.16.04.2","68.0.3440.75-0ubuntu0.16.04.1","68.0.3440.106-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-3ubuntu2.1"}]}],"versions":["2.6-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.5-0ubuntu1","1.10.3-0ubuntu0.15.10.1","1.10.3-0ubuntu0.15.10.2","1.11.3-0ubuntu3","1.11.4-0ubuntu1","1.11.5-0ubuntu1","1.12.5-0ubuntu1","1.12.6-0ubuntu1","1.12.7-0ubuntu1","1.13.6-0ubuntu1","1.14.7-0ubuntu1","1.14.9-0ubuntu0.16.04.1","1.15.7-0ubuntu0.16.04.1","1.15.8-0ubuntu0.16.04.1","1.16.5-0ubuntu0.16.04.1","1.17.7-0ubuntu0.16.04.1","1.17.9-0ubuntu0.16.04.1","1.18.3-0ubuntu0.16.04.1","1.18.5-0ubuntu0.16.04.1","1.19.4-0ubuntu0.16.04.1","1.20.4-0ubuntu0.16.04.1","1.21.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"69.0.3497.81-0ubuntu0.18.04.1"}]}],"versions":["61.0.3163.100-0ubuntu1.1378","62.0.3202.62-0ubuntu0.17.10.1380","62.0.3202.89-0ubuntu1.1386","62.0.3202.94-0ubuntu1.1388","63.0.3239.84-0ubuntu1","63.0.3239.108-0ubuntu1","64.0.3282.119-0ubuntu1","64.0.3282.140-0ubuntu1","64.0.3282.167-0ubuntu1","65.0.3325.146-0ubuntu1","65.0.3325.181-0ubuntu1","66.0.3359.139-0ubuntu0.18.04.3","66.0.3359.181-0ubuntu0.18.04.1","67.0.3396.99-0ubuntu0.18.04.1","68.0.3440.75-0ubuntu0.18.04.1","68.0.3440.106-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-1ubuntu0.1"}]}],"versions":["2.7-1ubuntu1","2.8-4","2.9-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-0ubuntu4.2"}]}],"versions":["2.5-0ubuntu1","2.5-0ubuntu2","2.5-0ubuntu3","2.5-0ubuntu4","2.5-0ubuntu4.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-3ubuntu2.1"}]}],"versions":["2.6-3ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-1ubuntu0.1"}]}],"versions":["2.7-1ubuntu1","2.8-4","2.9-1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.191-lp150.2.9.2"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-1.3"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"littlecms","product":"little_cms_color_engine"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://usn.ubuntu.com/3770-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/3770-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3004","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://github.com/mm2/Little-CMS/issues/171","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.debian.org/security/2018/dsa-4284","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/mm2/Little-CMS/commit/768f70ca405cd3159d990e962d54456773bb8cf8","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.gentoo.org/glsa/202105-18","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16435","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-2w2q-grxm-gr8f"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-16435","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-16435","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16435","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0387.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23533","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640115","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3004.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5179","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5179","tags":["advisory"]},{"url":"https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16435","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17462","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17462","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17463","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17463","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17464","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17465","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17468","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17468","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17471","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17473","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17474","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17474","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17474","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17475","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17475","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17476","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17477","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183498-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1108813","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183545-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1021364","tags":["report"]},{"url":"https://bugzilla.suse.com/1026649","tags":["report"]},{"url":"https://bugzilla.suse.com/1026650","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190049-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1101644","tags":["report"]},{"url":"https://bugzilla.suse.com/1101645","tags":["report"]},{"url":"https://bugzilla.suse.com/1101651","tags":["report"]},{"url":"https://bugzilla.suse.com/1101656","tags":["report"]},{"url":"https://bugzilla.suse.com/1112142","tags":["report"]},{"url":"https://bugzilla.suse.com/1112143","tags":["report"]},{"url":"https://bugzilla.suse.com/1112144","tags":["report"]},{"url":"https://bugzilla.suse.com/1112146","tags":["report"]},{"url":"https://bugzilla.suse.com/1112147","tags":["report"]},{"url":"https://bugzilla.suse.com/1112152","tags":["report"]},{"url":"https://bugzilla.suse.com/1112153","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190049-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190057-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1112148","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190057-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190058-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16435","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3770-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3770-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10165","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ/#U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-16435","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:00:00Z","modified":"2024-08-05T10:24:32.295Z","updated_at":"2026-11-02T14:35:11.072321Z"}],"euvd":[{"id":"EUVD-2018-8275","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:00:00Z","modified":"2024-08-05T10:24:32Z","updated_at":"2026-11-03T02:39:41.299131Z"}],"ghsa":[{"id":"GHSA-2w2q-grxm-gr8f","title":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the...","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2022-05-13T01:10:00Z","modified":"2023-02-01T05:03:28Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:03.88435Z"}],"nvd":[{"id":"CVE-2018-16435","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:29:02.183Z","modified":"2026-06-17T01:44:17.067Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:04:38.672108Z"}],"osv":[{"id":"ALPINE-CVE-2018-16435","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:29:02.183Z","modified":"2026-11-03T06:31:26.425062772Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"AZL-44076","title":"CVE-2018-16435 affecting package openjpeg2 2.3.1-12","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:29:02Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"BELL-CVE-2018-16435","title":"CVE-2018-16435 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:38.905079Z","modified":"2026-01-26T09:49:32.631819Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-16435","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:29:02.183Z","modified":"2026-10-20T13:35:34.062255666Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16435","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-04T00:29:02.183Z","modified":"2026-10-23T18:03:20.026561503Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"JLSEC-2026-490","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2026-05-08T13:06:54.969Z","modified":"2026-07-18T00:02:07.12380172Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"RHSA-2018:3004","title":"Red Hat Security Advisory: chromium-browser security update","status":"published","published":"2024-09-13T15:09:00Z","modified":"2026-06-28T10:26:56Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-16435","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","status":"published","published":"2018-09-03T00:00:00Z","modified":"2026-04-22T11:48:21.813838Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"DLA-1496-1","title":"lcms2 - security update","status":"published","published":"2018-09-06T00:00:00Z","modified":"2026-03-09T01:23:26.068699Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4284-1","title":"lcms2 - security update","status":"published","published":"2018-09-04T00:00:00Z","modified":"2026-03-09T02:10:28.733332Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4289-1","title":"chromium-browser - security update","status":"published","published":"2018-09-07T00:00:00Z","modified":"2026-03-09T02:11:07.177893Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0387","title":"Updated lcms2 packages fix security vulnerability","description":"Little CMS (aka Little Color Management System) 2.9 has an integer overflow\nin the AllocateDataSet function in cmscgats.c, leading to a heap-based\nbuffer overflow in the SetData function via a crafted file in the second\nargument to cmsIT8LoadFromFile. (CVE-2018-16435)\n","status":"published","published":"2018-09-21T16:26:22Z","modified":"2026-04-16T06:23:18.585895169Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:0043-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-3183: Improve script engine support (bsc#1112148)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T10:45:25Z","modified":"2026-02-04T02:32:36.407351Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10910-1","title":"lcms2-2.12-1.3 on GA media","description":"These are all security issues fixed in the lcms2-2.12-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:05:45.908939Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:3498-1","title":"Security update for lcms2","description":"This update for lcms2 fixes the following issues:\n\n- CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (bsc#1108813)\n","status":"published","published":"2018-10-26T14:12:28Z","modified":"2026-02-04T04:40:25.812104Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3545-1","title":"Security update for lcms2","description":"This update for lcms2 fixes the following security issues:\n\n- CVE-2016-10165: The Type_MLU_Read function allowed remote attackers to obtain\n  sensitive information or cause a denial of service via an image with a crafted\n  ICC profile, which triggered an out-of-bounds heap read (bsc#1021364).\n- CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet\n  function in cmscgats.c, that could lead to a heap-based buffer overflow\n  in the SetData function via a crafted file in the second argument to\n  cmsIT8LoadFromFile. (bsc#1108813)\n- Ensure that LUT stages match channel count (bsc#1026649).\n- sanitize input and output channels on MPE profiles (bsc#1026650).\n","status":"published","published":"2018-10-29T09:59:03Z","modified":"2026-02-04T03:45:51.446483Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:0049-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n- CVE-2018-2938: Support Derby connections (bsc#1101644)\n- CVE-2018-2940: Better stack walking (bsc#1101645)\n- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)\n- CVE-2018-2973: Improve LDAP support (bsc#1101656)\n- CVE-2018-3639 cpu speculative store bypass mitigation\n","status":"published","published":"2019-01-09T16:26:14Z","modified":"2026-02-04T03:23:52.627837Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0049-2","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n- CVE-2018-2938: Support Derby connections (bsc#1101644)\n- CVE-2018-2940: Better stack walking (bsc#1101645)\n- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)\n- CVE-2018-2973: Improve LDAP support (bsc#1101656)\n- CVE-2018-3639 cpu speculative store bypass mitigation\n","status":"published","published":"2019-04-12T18:44:10Z","modified":"2026-02-04T02:24:51.913671Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0057-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-3183: Improve script engine support (bsc#1112148)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n","status":"published","published":"2019-01-10T15:03:07Z","modified":"2026-02-04T03:38:26.898439Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0057-2","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-3183: Improve script engine support (bsc#1112148)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n","status":"published","published":"2019-04-27T15:02:56Z","modified":"2026-02-04T02:40:18.785184Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0058-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-3183: Improve script engine support (bsc#1112148)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n","status":"published","published":"2019-01-10T15:03:41Z","modified":"2026-02-04T04:28:53.2031Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3770-1","title":"lcms2 vulnerabilities","description":"Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2016-10165)\n\nQuang Nguyen discovered that Little CMS incorrectly handled certain files.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2018-16435)\n","status":"published","published":"2018-09-20T09:18:19Z","modified":"2026-04-22T09:49:52.809113Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}