Red Hat Product Errata RHSA-2005:480 - Security Advisory
Issued:
2005-06-02
Updated:
2005-06-02

RHSA-2005:480 - Security Advisory

Synopsis

ImageMagick security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated ImageMagick packages that fix a denial of service issue are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

ImageMagick(TM) is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

A denial of service bug was found in the way ImageMagick parses XWD files.
A user or program executing ImageMagick to process a malicious XWD file can
cause ImageMagick to enter an infinite loop causing a denial of service
condition. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2005-1739 to this issue.

Users of ImageMagick should upgrade to these updated packages, which
contain a backported patch, and are not vulnerable to this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 158790 - CAN-2005-1739 ImageMagick XWD denial of service

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ImageMagick-6.0.7.1-12.x86_64.rpm SHA-256: 6664fe3a13a654ee37f152e942013828f2de040e3e28addb978a9be7748b9702
ImageMagick-6.0.7.1-12.x86_64.rpm SHA-256: 6664fe3a13a654ee37f152e942013828f2de040e3e28addb978a9be7748b9702
ImageMagick-c++-6.0.7.1-12.x86_64.rpm SHA-256: ada801086d9969f3cc88f57d4a0393c36510d2594588a4fb21232bcee15171eb
ImageMagick-c++-6.0.7.1-12.x86_64.rpm SHA-256: ada801086d9969f3cc88f57d4a0393c36510d2594588a4fb21232bcee15171eb
ImageMagick-c++-devel-6.0.7.1-12.x86_64.rpm SHA-256: d9faaa5afaa6a387ccb8be607528d2c6f15105f5f8afc3f883a856ed71c69f62
ImageMagick-c++-devel-6.0.7.1-12.x86_64.rpm SHA-256: d9faaa5afaa6a387ccb8be607528d2c6f15105f5f8afc3f883a856ed71c69f62
ImageMagick-devel-6.0.7.1-12.x86_64.rpm SHA-256: b33a4eab29536fb109ab5f624c65eb0536697d53e904335780500c8750db5fb9
ImageMagick-devel-6.0.7.1-12.x86_64.rpm SHA-256: b33a4eab29536fb109ab5f624c65eb0536697d53e904335780500c8750db5fb9
ImageMagick-perl-6.0.7.1-12.x86_64.rpm SHA-256: f554639c9b575610376b4ae296c31b37453f822002438961733c39a4ddf87b55
ImageMagick-perl-6.0.7.1-12.x86_64.rpm SHA-256: f554639c9b575610376b4ae296c31b37453f822002438961733c39a4ddf87b55
ia64
ImageMagick-6.0.7.1-12.ia64.rpm SHA-256: 2b86e6ef7ffa525e435a353f82b17f2213b8b137f5f348720fd0249b016d4f14
ImageMagick-6.0.7.1-12.ia64.rpm SHA-256: 2b86e6ef7ffa525e435a353f82b17f2213b8b137f5f348720fd0249b016d4f14
ImageMagick-c++-6.0.7.1-12.ia64.rpm SHA-256: 47a6de9c45645939860f2a5857cdd174e5eb5ca13bca47e1461306ca8a3c93ef
ImageMagick-c++-6.0.7.1-12.ia64.rpm SHA-256: 47a6de9c45645939860f2a5857cdd174e5eb5ca13bca47e1461306ca8a3c93ef
ImageMagick-c++-devel-6.0.7.1-12.ia64.rpm SHA-256: d9236876734c37dd631f8a729c0ef3cc8564187362fd515ae3a8addde287f937
ImageMagick-c++-devel-6.0.7.1-12.ia64.rpm SHA-256: d9236876734c37dd631f8a729c0ef3cc8564187362fd515ae3a8addde287f937
ImageMagick-devel-6.0.7.1-12.ia64.rpm SHA-256: f100878513c6dce16327ac0b4d9f4621aed2ea7c3093317a0bb6cd92587662c5
ImageMagick-devel-6.0.7.1-12.ia64.rpm SHA-256: f100878513c6dce16327ac0b4d9f4621aed2ea7c3093317a0bb6cd92587662c5
ImageMagick-perl-6.0.7.1-12.ia64.rpm SHA-256: 318f2c5006666e15903ab0c3668b75f45eb6c61302b914c4f767c04a21d96729
ImageMagick-perl-6.0.7.1-12.ia64.rpm SHA-256: 318f2c5006666e15903ab0c3668b75f45eb6c61302b914c4f767c04a21d96729
i386
ImageMagick-6.0.7.1-12.i386.rpm SHA-256: d77b2408e72fe8e14bf735b1b30abb21f6bdc9f8b6bd5b24968f4c605f11ff1e
ImageMagick-6.0.7.1-12.i386.rpm SHA-256: d77b2408e72fe8e14bf735b1b30abb21f6bdc9f8b6bd5b24968f4c605f11ff1e
ImageMagick-c++-6.0.7.1-12.i386.rpm SHA-256: 93e2c49e4b7ec03a1cba7d5cd7793b82d1f274725f05ce585cc7502275d19596
ImageMagick-c++-6.0.7.1-12.i386.rpm SHA-256: 93e2c49e4b7ec03a1cba7d5cd7793b82d1f274725f05ce585cc7502275d19596
ImageMagick-c++-devel-6.0.7.1-12.i386.rpm SHA-256: db9159d71a4f8c7ccb873732c77e8e21ef559496eca413b6b2a63a5b368f37bf
ImageMagick-c++-devel-6.0.7.1-12.i386.rpm SHA-256: db9159d71a4f8c7ccb873732c77e8e21ef559496eca413b6b2a63a5b368f37bf
ImageMagick-devel-6.0.7.1-12.i386.rpm SHA-256: d6a4810c8c9fa586f78d32e447a55bb390d130c6b1a4e32919521ec99c1579f6
ImageMagick-devel-6.0.7.1-12.i386.rpm SHA-256: d6a4810c8c9fa586f78d32e447a55bb390d130c6b1a4e32919521ec99c1579f6
ImageMagick-perl-6.0.7.1-12.i386.rpm SHA-256: 42836b6b56e17b7325f4def5bccbf24c182183f5158222f979b37fb74e9febe0
ImageMagick-perl-6.0.7.1-12.i386.rpm SHA-256: 42836b6b56e17b7325f4def5bccbf24c182183f5158222f979b37fb74e9febe0

Red Hat Enterprise Linux Server 3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Server 2

SRPM
ia64
i386

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ImageMagick-6.0.7.1-12.x86_64.rpm SHA-256: 6664fe3a13a654ee37f152e942013828f2de040e3e28addb978a9be7748b9702
ImageMagick-c++-6.0.7.1-12.x86_64.rpm SHA-256: ada801086d9969f3cc88f57d4a0393c36510d2594588a4fb21232bcee15171eb
ImageMagick-c++-devel-6.0.7.1-12.x86_64.rpm SHA-256: d9faaa5afaa6a387ccb8be607528d2c6f15105f5f8afc3f883a856ed71c69f62
ImageMagick-devel-6.0.7.1-12.x86_64.rpm SHA-256: b33a4eab29536fb109ab5f624c65eb0536697d53e904335780500c8750db5fb9
ImageMagick-perl-6.0.7.1-12.x86_64.rpm SHA-256: f554639c9b575610376b4ae296c31b37453f822002438961733c39a4ddf87b55
ia64
ImageMagick-6.0.7.1-12.ia64.rpm SHA-256: 2b86e6ef7ffa525e435a353f82b17f2213b8b137f5f348720fd0249b016d4f14
ImageMagick-c++-6.0.7.1-12.ia64.rpm SHA-256: 47a6de9c45645939860f2a5857cdd174e5eb5ca13bca47e1461306ca8a3c93ef
ImageMagick-c++-devel-6.0.7.1-12.ia64.rpm SHA-256: d9236876734c37dd631f8a729c0ef3cc8564187362fd515ae3a8addde287f937
ImageMagick-devel-6.0.7.1-12.ia64.rpm SHA-256: f100878513c6dce16327ac0b4d9f4621aed2ea7c3093317a0bb6cd92587662c5
ImageMagick-perl-6.0.7.1-12.ia64.rpm SHA-256: 318f2c5006666e15903ab0c3668b75f45eb6c61302b914c4f767c04a21d96729
i386
ImageMagick-6.0.7.1-12.i386.rpm SHA-256: d77b2408e72fe8e14bf735b1b30abb21f6bdc9f8b6bd5b24968f4c605f11ff1e
ImageMagick-c++-6.0.7.1-12.i386.rpm SHA-256: 93e2c49e4b7ec03a1cba7d5cd7793b82d1f274725f05ce585cc7502275d19596
ImageMagick-c++-devel-6.0.7.1-12.i386.rpm SHA-256: db9159d71a4f8c7ccb873732c77e8e21ef559496eca413b6b2a63a5b368f37bf
ImageMagick-devel-6.0.7.1-12.i386.rpm SHA-256: d6a4810c8c9fa586f78d32e447a55bb390d130c6b1a4e32919521ec99c1579f6
ImageMagick-perl-6.0.7.1-12.i386.rpm SHA-256: 42836b6b56e17b7325f4def5bccbf24c182183f5158222f979b37fb74e9febe0

Red Hat Enterprise Linux Workstation 3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Workstation 2

SRPM
ia64
i386

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ImageMagick-6.0.7.1-12.x86_64.rpm SHA-256: 6664fe3a13a654ee37f152e942013828f2de040e3e28addb978a9be7748b9702
ImageMagick-c++-6.0.7.1-12.x86_64.rpm SHA-256: ada801086d9969f3cc88f57d4a0393c36510d2594588a4fb21232bcee15171eb
ImageMagick-c++-devel-6.0.7.1-12.x86_64.rpm SHA-256: d9faaa5afaa6a387ccb8be607528d2c6f15105f5f8afc3f883a856ed71c69f62
ImageMagick-devel-6.0.7.1-12.x86_64.rpm SHA-256: b33a4eab29536fb109ab5f624c65eb0536697d53e904335780500c8750db5fb9
ImageMagick-perl-6.0.7.1-12.x86_64.rpm SHA-256: f554639c9b575610376b4ae296c31b37453f822002438961733c39a4ddf87b55
i386
ImageMagick-6.0.7.1-12.i386.rpm SHA-256: d77b2408e72fe8e14bf735b1b30abb21f6bdc9f8b6bd5b24968f4c605f11ff1e
ImageMagick-c++-6.0.7.1-12.i386.rpm SHA-256: 93e2c49e4b7ec03a1cba7d5cd7793b82d1f274725f05ce585cc7502275d19596
ImageMagick-c++-devel-6.0.7.1-12.i386.rpm SHA-256: db9159d71a4f8c7ccb873732c77e8e21ef559496eca413b6b2a63a5b368f37bf
ImageMagick-devel-6.0.7.1-12.i386.rpm SHA-256: d6a4810c8c9fa586f78d32e447a55bb390d130c6b1a4e32919521ec99c1579f6
ImageMagick-perl-6.0.7.1-12.i386.rpm SHA-256: 42836b6b56e17b7325f4def5bccbf24c182183f5158222f979b37fb74e9febe0

Red Hat Enterprise Linux Desktop 3

SRPM
x86_64
i386

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ImageMagick-6.0.7.1-12.s390x.rpm SHA-256: 844b361e83d4da29be243c6cf7ab33199c96c673079517bdb741efe9a61a3e68
ImageMagick-c++-6.0.7.1-12.s390x.rpm SHA-256: f04929498922d4e22b42bd77a21d1f9bb1e810e6a6e661a90203c46aa4afb04a
ImageMagick-c++-devel-6.0.7.1-12.s390x.rpm SHA-256: de4fb18b303bf2cec743b8af9bdf38b2d53811d02ee053ab261c465277f01566
ImageMagick-devel-6.0.7.1-12.s390x.rpm SHA-256: a1a65294c59cf517ebd33c6dde6e5781eea2102b6c64606dc867ade9928e749d
ImageMagick-perl-6.0.7.1-12.s390x.rpm SHA-256: b1e7ad927674fa711065de1b1dc17e22844d870aded6ced6489de8668075f939
s390
ImageMagick-6.0.7.1-12.s390.rpm SHA-256: e9bb7e6a57e3e14f343278ea48bcb5a0ffc23069c27150c984d27b9ea25e4238
ImageMagick-c++-6.0.7.1-12.s390.rpm SHA-256: d4b88f5faa056c3acfc13852bc375f472c0559afcfb7f7841fb7d09db7d54503
ImageMagick-c++-devel-6.0.7.1-12.s390.rpm SHA-256: e50b769f802ead67bd07476a2d3efd945a07e6d841291278fd140812b9bf851d
ImageMagick-devel-6.0.7.1-12.s390.rpm SHA-256: 7cb2719d72e9fbf1535a9ecb340135138229cdae747c58b356b731e116d6a78e
ImageMagick-perl-6.0.7.1-12.s390.rpm SHA-256: e7e93bbcafb810110026940eb26115028f81e37ae45c35731b692b34fb66729f

Red Hat Enterprise Linux for IBM z Systems 3

SRPM
s390x
s390

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ImageMagick-6.0.7.1-12.ppc.rpm SHA-256: b129f5bdf477071822d2b4684407693593b3ab773e4d7da69bc8d97ddaafe010
ImageMagick-c++-6.0.7.1-12.ppc.rpm SHA-256: caa68dcc056a02d90ed32a17a09227986e2af0faded383c98dcdaeb22e683b01
ImageMagick-c++-devel-6.0.7.1-12.ppc.rpm SHA-256: ea622a61afaf1ccb3a6c852472d920939c0bd83fd1ae2ee569bd6b4005bf59bb
ImageMagick-devel-6.0.7.1-12.ppc.rpm SHA-256: 0901edf0386b10ed23af25789e6917a4838488ac17fe3fb245bf0181477d3d57
ImageMagick-perl-6.0.7.1-12.ppc.rpm SHA-256: 52b7ad4d9e291a29e523de3ba1e2fcac1b544bfdbd7c54566304b2346380f2e1

Red Hat Enterprise Linux for Power, big endian 3

SRPM
ppc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.