Ubuntu 3770-1: Little CMS vulnerabilities
Summary
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: liblcms2-2 2.9-1ubuntu0.1 liblcms2-utils 2.9-1ubuntu0.1 Ubuntu 16.04 LTS: liblcms2-2 2.6-3ubuntu2.1 liblcms2-utils 2.6-3ubuntu2.1 Ubuntu 14.04 LTS: liblcms2-2 2.5-0ubuntu4.2 liblcms2-utils 2.5-0ubuntu4.2 After a standard system update you need to restart applications using Little CMS to make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-3770-1
CVE-2016-10165, CVE-2018-16435
Package Information
https://launchpad.net/ubuntu/+source/lcms2/2.9-1ubuntu0.1 https://launchpad.net/ubuntu/+source/lcms2/2.6-3ubuntu2.1 https://launchpad.net/ubuntu/+source/lcms2/2.5-0ubuntu4.2