Issued:
2005-05-25
Updated:
2005-05-25

RHSA-2005:413 - Security Advisory

Synopsis

ImageMagick security update

Type/Severity

Security Advisory: Important

Topic

Updated ImageMagick packages that fix a buffer overflow issue are now
available.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

ImageMagick(TM) is an image display and manipulation tool for the X Window
System which can read and write multiple image formats.

A heap based buffer overflow bug was found in the way ImageMagick parses
PNM files. An attacker could execute arbitrary code on a victim's machine
if they were able to trick the victim into opening a specially crafted PNM
file. The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-1275 to this issue.

Users of ImageMagick should upgrade to these updated packages, which
contain a backported patch, and are not vulnerable to this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
ImageMagick-6.0.7.1-11.src.rpm SHA-256: e2b556481ec8ddb079f57db7a11684a654adce7324e22bfd25775319041e136b
x86_64
ImageMagick-6.0.7.1-11.x86_64.rpm SHA-256: 87a76763663d373c2dc91be3fd06f9da72f6a27c816a72b6a15debc108cd699e
ImageMagick-6.0.7.1-11.x86_64.rpm SHA-256: 87a76763663d373c2dc91be3fd06f9da72f6a27c816a72b6a15debc108cd699e
ImageMagick-c++-6.0.7.1-11.x86_64.rpm SHA-256: fed03ed339846a8dcd82cfb19f937fb261ced6a4835f48c00281718a8ff5b71d
ImageMagick-c++-6.0.7.1-11.x86_64.rpm SHA-256: fed03ed339846a8dcd82cfb19f937fb261ced6a4835f48c00281718a8ff5b71d
ImageMagick-c++-devel-6.0.7.1-11.x86_64.rpm SHA-256: 5d66bc2464e604f130b87e6eb3af460c2cb05074fc9240e2a938e22ccf27ca4b
ImageMagick-c++-devel-6.0.7.1-11.x86_64.rpm SHA-256: 5d66bc2464e604f130b87e6eb3af460c2cb05074fc9240e2a938e22ccf27ca4b
ImageMagick-devel-6.0.7.1-11.x86_64.rpm SHA-256: aa05480c3dc38bcd17eb1b94f97ff00411caee611abd4fd6325d7ea4681a24ff
ImageMagick-devel-6.0.7.1-11.x86_64.rpm SHA-256: aa05480c3dc38bcd17eb1b94f97ff00411caee611abd4fd6325d7ea4681a24ff
ImageMagick-perl-6.0.7.1-11.x86_64.rpm SHA-256: c60b2b498ecb61505ce8ebd160e3083938ba94bdd81e40c9aeea92bc762c49a7
ImageMagick-perl-6.0.7.1-11.x86_64.rpm SHA-256: c60b2b498ecb61505ce8ebd160e3083938ba94bdd81e40c9aeea92bc762c49a7
ia64
ImageMagick-6.0.7.1-11.ia64.rpm SHA-256: 84164b1318df613e6730f2c1f3dd97bc017f21875190e22cf774a63e3755e1f0
ImageMagick-6.0.7.1-11.ia64.rpm SHA-256: 84164b1318df613e6730f2c1f3dd97bc017f21875190e22cf774a63e3755e1f0
ImageMagick-c++-6.0.7.1-11.ia64.rpm SHA-256: 8c91310387123e66503da64ca9d3e8aa2268dd070ac73b37b59907f92caff494
ImageMagick-c++-6.0.7.1-11.ia64.rpm SHA-256: 8c91310387123e66503da64ca9d3e8aa2268dd070ac73b37b59907f92caff494
ImageMagick-c++-devel-6.0.7.1-11.ia64.rpm SHA-256: 632ac84aa08d8205466d82899dbe54bc0079de3693b89dacaff00cd017be7d84
ImageMagick-c++-devel-6.0.7.1-11.ia64.rpm SHA-256: 632ac84aa08d8205466d82899dbe54bc0079de3693b89dacaff00cd017be7d84
ImageMagick-devel-6.0.7.1-11.ia64.rpm SHA-256: 7db0426ba1099ed9776e1289e9cec2a9c5b5d113712055b15c0ef4e338098050
ImageMagick-devel-6.0.7.1-11.ia64.rpm SHA-256: 7db0426ba1099ed9776e1289e9cec2a9c5b5d113712055b15c0ef4e338098050
ImageMagick-perl-6.0.7.1-11.ia64.rpm SHA-256: 622a5a82f86301a74ef7621f5a2d21d87f9ecee155f2fe37969cceb155f5eb97
ImageMagick-perl-6.0.7.1-11.ia64.rpm SHA-256: 622a5a82f86301a74ef7621f5a2d21d87f9ecee155f2fe37969cceb155f5eb97
i386
ImageMagick-6.0.7.1-11.i386.rpm SHA-256: 40fea08fddd96cb36dbce80699e1a0755a0b05f96e2a89022af812187207b016
ImageMagick-6.0.7.1-11.i386.rpm SHA-256: 40fea08fddd96cb36dbce80699e1a0755a0b05f96e2a89022af812187207b016
ImageMagick-c++-6.0.7.1-11.i386.rpm SHA-256: 5ca90042ce1e620b33cd0905ab9a40490115778b7e1c2002c5ba368d3767dfc6
ImageMagick-c++-6.0.7.1-11.i386.rpm SHA-256: 5ca90042ce1e620b33cd0905ab9a40490115778b7e1c2002c5ba368d3767dfc6
ImageMagick-c++-devel-6.0.7.1-11.i386.rpm SHA-256: 0b5bc79fc5e781d26cb1a720d90b57b8114052089a1e6d264d201291716af44f
ImageMagick-c++-devel-6.0.7.1-11.i386.rpm SHA-256: 0b5bc79fc5e781d26cb1a720d90b57b8114052089a1e6d264d201291716af44f
ImageMagick-devel-6.0.7.1-11.i386.rpm SHA-256: 428c07b3adc0037251e177d2782b622a2c35e986d03086b66b24e7bf40fe5dc3
ImageMagick-devel-6.0.7.1-11.i386.rpm SHA-256: 428c07b3adc0037251e177d2782b622a2c35e986d03086b66b24e7bf40fe5dc3
ImageMagick-perl-6.0.7.1-11.i386.rpm SHA-256: 2ea13f028a22574827d59bf2c0d79b9febfdbe026515eaaa4db0d1130a91fe17
ImageMagick-perl-6.0.7.1-11.i386.rpm SHA-256: 2ea13f028a22574827d59bf2c0d79b9febfdbe026515eaaa4db0d1130a91fe17

Red Hat Enterprise Linux Workstation 4

SRPM
ImageMagick-6.0.7.1-11.src.rpm SHA-256: e2b556481ec8ddb079f57db7a11684a654adce7324e22bfd25775319041e136b
x86_64
ImageMagick-6.0.7.1-11.x86_64.rpm SHA-256: 87a76763663d373c2dc91be3fd06f9da72f6a27c816a72b6a15debc108cd699e
ImageMagick-c++-6.0.7.1-11.x86_64.rpm SHA-256: fed03ed339846a8dcd82cfb19f937fb261ced6a4835f48c00281718a8ff5b71d
ImageMagick-c++-devel-6.0.7.1-11.x86_64.rpm SHA-256: 5d66bc2464e604f130b87e6eb3af460c2cb05074fc9240e2a938e22ccf27ca4b
ImageMagick-devel-6.0.7.1-11.x86_64.rpm SHA-256: aa05480c3dc38bcd17eb1b94f97ff00411caee611abd4fd6325d7ea4681a24ff
ImageMagick-perl-6.0.7.1-11.x86_64.rpm SHA-256: c60b2b498ecb61505ce8ebd160e3083938ba94bdd81e40c9aeea92bc762c49a7
ia64
ImageMagick-6.0.7.1-11.ia64.rpm SHA-256: 84164b1318df613e6730f2c1f3dd97bc017f21875190e22cf774a63e3755e1f0
ImageMagick-c++-6.0.7.1-11.ia64.rpm SHA-256: 8c91310387123e66503da64ca9d3e8aa2268dd070ac73b37b59907f92caff494
ImageMagick-c++-devel-6.0.7.1-11.ia64.rpm SHA-256: 632ac84aa08d8205466d82899dbe54bc0079de3693b89dacaff00cd017be7d84
ImageMagick-devel-6.0.7.1-11.ia64.rpm SHA-256: 7db0426ba1099ed9776e1289e9cec2a9c5b5d113712055b15c0ef4e338098050
ImageMagick-perl-6.0.7.1-11.ia64.rpm SHA-256: 622a5a82f86301a74ef7621f5a2d21d87f9ecee155f2fe37969cceb155f5eb97
i386
ImageMagick-6.0.7.1-11.i386.rpm SHA-256: 40fea08fddd96cb36dbce80699e1a0755a0b05f96e2a89022af812187207b016
ImageMagick-c++-6.0.7.1-11.i386.rpm SHA-256: 5ca90042ce1e620b33cd0905ab9a40490115778b7e1c2002c5ba368d3767dfc6
ImageMagick-c++-devel-6.0.7.1-11.i386.rpm SHA-256: 0b5bc79fc5e781d26cb1a720d90b57b8114052089a1e6d264d201291716af44f
ImageMagick-devel-6.0.7.1-11.i386.rpm SHA-256: 428c07b3adc0037251e177d2782b622a2c35e986d03086b66b24e7bf40fe5dc3
ImageMagick-perl-6.0.7.1-11.i386.rpm SHA-256: 2ea13f028a22574827d59bf2c0d79b9febfdbe026515eaaa4db0d1130a91fe17

Red Hat Enterprise Linux Desktop 4

SRPM
ImageMagick-6.0.7.1-11.src.rpm SHA-256: e2b556481ec8ddb079f57db7a11684a654adce7324e22bfd25775319041e136b
x86_64
ImageMagick-6.0.7.1-11.x86_64.rpm SHA-256: 87a76763663d373c2dc91be3fd06f9da72f6a27c816a72b6a15debc108cd699e
ImageMagick-c++-6.0.7.1-11.x86_64.rpm SHA-256: fed03ed339846a8dcd82cfb19f937fb261ced6a4835f48c00281718a8ff5b71d
ImageMagick-c++-devel-6.0.7.1-11.x86_64.rpm SHA-256: 5d66bc2464e604f130b87e6eb3af460c2cb05074fc9240e2a938e22ccf27ca4b
ImageMagick-devel-6.0.7.1-11.x86_64.rpm SHA-256: aa05480c3dc38bcd17eb1b94f97ff00411caee611abd4fd6325d7ea4681a24ff
ImageMagick-perl-6.0.7.1-11.x86_64.rpm SHA-256: c60b2b498ecb61505ce8ebd160e3083938ba94bdd81e40c9aeea92bc762c49a7
i386
ImageMagick-6.0.7.1-11.i386.rpm SHA-256: 40fea08fddd96cb36dbce80699e1a0755a0b05f96e2a89022af812187207b016
ImageMagick-c++-6.0.7.1-11.i386.rpm SHA-256: 5ca90042ce1e620b33cd0905ab9a40490115778b7e1c2002c5ba368d3767dfc6
ImageMagick-c++-devel-6.0.7.1-11.i386.rpm SHA-256: 0b5bc79fc5e781d26cb1a720d90b57b8114052089a1e6d264d201291716af44f
ImageMagick-devel-6.0.7.1-11.i386.rpm SHA-256: 428c07b3adc0037251e177d2782b622a2c35e986d03086b66b24e7bf40fe5dc3
ImageMagick-perl-6.0.7.1-11.i386.rpm SHA-256: 2ea13f028a22574827d59bf2c0d79b9febfdbe026515eaaa4db0d1130a91fe17

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
ImageMagick-6.0.7.1-11.src.rpm SHA-256: e2b556481ec8ddb079f57db7a11684a654adce7324e22bfd25775319041e136b
s390x
ImageMagick-6.0.7.1-11.s390x.rpm SHA-256: 9f9955d163ea3f26f63516a1b962362ed836e783a81164053c5f19655e2b5a3c
ImageMagick-c++-6.0.7.1-11.s390x.rpm SHA-256: 6a3fc0f9efec5f03a7ef89a6df41221fbb9e867e2bd84a75f1a0ad9548d141b2
ImageMagick-c++-devel-6.0.7.1-11.s390x.rpm SHA-256: 79d4ac4a4c75e5019df113c5be7e04449a1bfe624e4a74176d5816ae5f01a711
ImageMagick-devel-6.0.7.1-11.s390x.rpm SHA-256: 14ea0cbbf148c45dc765c0df3269cd6cb4923f3b7187a2355c46f57444317206
ImageMagick-perl-6.0.7.1-11.s390x.rpm SHA-256: 09c52017bbb5baa02fa072d7dac9569e9cbbf5d1aa7a86ba74d132b47c4fcea6
s390
ImageMagick-6.0.7.1-11.s390.rpm SHA-256: 765c672d7eea2089db59f2ce78bf0ecfefb2de348ae767ef2632fa93523ae4d7
ImageMagick-c++-6.0.7.1-11.s390.rpm SHA-256: 1e45f73c7afa738dedbec7e2ee8c833e18ea8d0ddbbe69fd01b6c53d1083921c
ImageMagick-c++-devel-6.0.7.1-11.s390.rpm SHA-256: 89ff8462643f3026f9b4fb888357551c2d56037777548213c4a05b323e31dac8
ImageMagick-devel-6.0.7.1-11.s390.rpm SHA-256: 8575e2670b84ce8aecd7ffa7293ddb277a00dc19e78680d1bfb48664a6ca8e9a
ImageMagick-perl-6.0.7.1-11.s390.rpm SHA-256: 716e95dc658040fc76102ff210fb7c0289d9dfcdec08370b0e4eac33657b3adf

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ImageMagick-6.0.7.1-11.src.rpm SHA-256: e2b556481ec8ddb079f57db7a11684a654adce7324e22bfd25775319041e136b
ppc
ImageMagick-6.0.7.1-11.ppc.rpm SHA-256: 804d47c0a3066b0ba319257229b9e9923bafb3b0f3e5ce5d782f347acc7dd1b5
ImageMagick-c++-6.0.7.1-11.ppc.rpm SHA-256: 7eabc7e86ec6e61b7d707ecd3debbcf741f997146307fa4fc986684b76f98f55
ImageMagick-c++-devel-6.0.7.1-11.ppc.rpm SHA-256: 76223594c463c66af2dfb746174074f697b11f88182bbd64f9f6b3bf1643fa70
ImageMagick-devel-6.0.7.1-11.ppc.rpm SHA-256: c55075102f06f11c06b35cf915c9cf3df362e9cccde41a7d642ec75b700c8ede
ImageMagick-perl-6.0.7.1-11.ppc.rpm SHA-256: 57b37a397501cf0a5ad0ecdb4bee585d2c60719d08d7a016c662dd7beade4ae6

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.