Comments (3)
mm2
commented on May 14, 2024
Thanks Tomas,
Yes, Oracle guys already notified me. I have fixed it on GIT. Severity is low, as it cannot be used as exploit.
Regards, Marti.
from little-cms.
thoger
commented on May 14, 2024
Thank you for the quick response! For posterity, commit is 74ba391.
Can you share any details on the impact or if this is needed for 1.x too?
from little-cms.
mm2
commented on May 14, 2024
Probably.. but I don't maintain 1.x anymore, it has more serious security issues that this one. My recommendation is to migrate to 2.6 and avoid problems.
from little-cms.
Related Issues (20)
- threading plugin feature request: allow to replace the threading backend HOT 2
- fast float: compiler warning about misleading indentation HOT 2
- Fast float plugin causes incorrect results in sRGB to XYZ transform
- Ship separate pkgconf files for plugins HOT 4
- Suggest Adoption of Scorecard GitHub Action HOT 7
- Different results depending on endianess HOT 5
- It8 get wrong strings when SAMPLE_NAME start with number.
- Postscript creation code sometimes unusable HOT 2
- UBSan errors found in cmsGetColorSpace: not a valid value for type 'cmsColorSpaceSignature' HOT 2
- [question] How hard it might be to support OpenCL? HOT 1
- Request: allow the provided GPL plugins to build by default HOT 2
- version mismatch in some files HOT 1
- 2.16: meson falis HOT 6
- Simple Question: How do I get "cmsICCMeasurementConditions" data in IccProfile? HOT 2
- lcms2-2.16 crashes transforming sRGB float to planar uint16 HOT 9
- Eval4Inputs optimisation HOT 5
- CI: use a dependency update tool to keep GitHub Actions updated
- website blog doesn't announce 2.16 release HOT 1
- Backwards incompatible API-change in 2.16 HOT 5
- The fast float plugin doesn't premultiply alpha HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from little-cms.