Issued:
2006-08-24
Updated:
2006-08-24

RHSA-2006:0633 - Security Advisory

Synopsis

ImageMagick security update

Type/Severity

Security Advisory: Moderate

Topic

Updated ImageMagick packages that fix several security issues are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

ImageMagick(TM) is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

Tavis Ormandy discovered several integer and buffer overflow flaws in the
way ImageMagick decodes XCF, SGI, and Sun bitmap graphic files. An attacker
could execute arbitrary code on a victim's machine if they were able to
trick the victim into opening a specially crafted image file.
(CVE-2006-3743, CVE-2006-3744, CVE-2006-4144)

Users of ImageMagick should upgrade to these updated packages, which
contain backported patches and are not vulnerable to these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 202193 - CVE-2006-3743 ImageMagick multiple security issues (CVE-2006-3744)
  • BZ - 202771 - CVE-2006-4144 ImageMagick ReadSGIImage() integer overflow

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ImageMagick-6.0.7.1-16.x86_64.rpm SHA-256: f82ab742f8f82ae67e83f81945700f4914ff392136bbfa679c7c270214e65e22
ImageMagick-6.0.7.1-16.x86_64.rpm SHA-256: f82ab742f8f82ae67e83f81945700f4914ff392136bbfa679c7c270214e65e22
ImageMagick-c++-6.0.7.1-16.x86_64.rpm SHA-256: 34064355b5b28a47bb7e8373497372391a8b070c9348e6bcf5e505e29ba8d840
ImageMagick-c++-6.0.7.1-16.x86_64.rpm SHA-256: 34064355b5b28a47bb7e8373497372391a8b070c9348e6bcf5e505e29ba8d840
ImageMagick-c++-devel-6.0.7.1-16.x86_64.rpm SHA-256: 0fa3a970012491b730170dbc8d5e8dde5312d263802e973f120e2b4e269d54ab
ImageMagick-c++-devel-6.0.7.1-16.x86_64.rpm SHA-256: 0fa3a970012491b730170dbc8d5e8dde5312d263802e973f120e2b4e269d54ab
ImageMagick-devel-6.0.7.1-16.x86_64.rpm SHA-256: 38854133dcbf90b3f8e2753098b7c5ce2c0c9176dd5fd60b15d2ce2cea5893a9
ImageMagick-devel-6.0.7.1-16.x86_64.rpm SHA-256: 38854133dcbf90b3f8e2753098b7c5ce2c0c9176dd5fd60b15d2ce2cea5893a9
ImageMagick-perl-6.0.7.1-16.x86_64.rpm SHA-256: a845ea331846e2ab04c49fbf0d1dfb21e670b0bfa65c5d705571b99292e16de1
ImageMagick-perl-6.0.7.1-16.x86_64.rpm SHA-256: a845ea331846e2ab04c49fbf0d1dfb21e670b0bfa65c5d705571b99292e16de1
ia64
ImageMagick-6.0.7.1-16.ia64.rpm SHA-256: 9b856c851a68246997c5a8ecf086ae7054bf9f890bf5652010fcd074619d1ddd
ImageMagick-6.0.7.1-16.ia64.rpm SHA-256: 9b856c851a68246997c5a8ecf086ae7054bf9f890bf5652010fcd074619d1ddd
ImageMagick-c++-6.0.7.1-16.ia64.rpm SHA-256: cdec216e3bd2208c7052e1299a9fb5aa3a84426d5c9e4e5c91e0ab253b1ba479
ImageMagick-c++-6.0.7.1-16.ia64.rpm SHA-256: cdec216e3bd2208c7052e1299a9fb5aa3a84426d5c9e4e5c91e0ab253b1ba479
ImageMagick-c++-devel-6.0.7.1-16.ia64.rpm SHA-256: 293421847d98e50739969515252057bbf80ea056ecaa0a72c40edd23e79b0de6
ImageMagick-c++-devel-6.0.7.1-16.ia64.rpm SHA-256: 293421847d98e50739969515252057bbf80ea056ecaa0a72c40edd23e79b0de6
ImageMagick-devel-6.0.7.1-16.ia64.rpm SHA-256: 95d3f688dde457312b3222530d46b1138a9da7bfd909d17922739b2dedd29f2a
ImageMagick-devel-6.0.7.1-16.ia64.rpm SHA-256: 95d3f688dde457312b3222530d46b1138a9da7bfd909d17922739b2dedd29f2a
ImageMagick-perl-6.0.7.1-16.ia64.rpm SHA-256: 6f6fa2b7d7409819b45a536708d7e68d733ce6d0058d960fd83439ca366646cb
ImageMagick-perl-6.0.7.1-16.ia64.rpm SHA-256: 6f6fa2b7d7409819b45a536708d7e68d733ce6d0058d960fd83439ca366646cb
i386
ImageMagick-6.0.7.1-16.i386.rpm SHA-256: 9e314bbc53a8d789c401cbaf6157a743f9d07397cdc5234b2ea5546e94e4022d
ImageMagick-6.0.7.1-16.i386.rpm SHA-256: 9e314bbc53a8d789c401cbaf6157a743f9d07397cdc5234b2ea5546e94e4022d
ImageMagick-c++-6.0.7.1-16.i386.rpm SHA-256: 1aadacdb3328c2e29c070ba2f6332258823a88815df2e524e868dabe92d73f5e
ImageMagick-c++-6.0.7.1-16.i386.rpm SHA-256: 1aadacdb3328c2e29c070ba2f6332258823a88815df2e524e868dabe92d73f5e
ImageMagick-c++-devel-6.0.7.1-16.i386.rpm SHA-256: 3c273de752fef48d7dda0899ac9486dee03ec7f699bfdc653bde549b0cd07bb0
ImageMagick-c++-devel-6.0.7.1-16.i386.rpm SHA-256: 3c273de752fef48d7dda0899ac9486dee03ec7f699bfdc653bde549b0cd07bb0
ImageMagick-devel-6.0.7.1-16.i386.rpm SHA-256: 53d928c783f4358b0e73ad9645394fef5db2743c5429c75aa8f4dcee40fbf8e3
ImageMagick-devel-6.0.7.1-16.i386.rpm SHA-256: 53d928c783f4358b0e73ad9645394fef5db2743c5429c75aa8f4dcee40fbf8e3
ImageMagick-perl-6.0.7.1-16.i386.rpm SHA-256: 5118f97f58fe2af9eb06809af5baeb035e2d3eb37578a47490e1746919ee1817
ImageMagick-perl-6.0.7.1-16.i386.rpm SHA-256: 5118f97f58fe2af9eb06809af5baeb035e2d3eb37578a47490e1746919ee1817

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ImageMagick-6.0.7.1-16.x86_64.rpm SHA-256: f82ab742f8f82ae67e83f81945700f4914ff392136bbfa679c7c270214e65e22
ImageMagick-c++-6.0.7.1-16.x86_64.rpm SHA-256: 34064355b5b28a47bb7e8373497372391a8b070c9348e6bcf5e505e29ba8d840
ImageMagick-c++-devel-6.0.7.1-16.x86_64.rpm SHA-256: 0fa3a970012491b730170dbc8d5e8dde5312d263802e973f120e2b4e269d54ab
ImageMagick-devel-6.0.7.1-16.x86_64.rpm SHA-256: 38854133dcbf90b3f8e2753098b7c5ce2c0c9176dd5fd60b15d2ce2cea5893a9
ImageMagick-perl-6.0.7.1-16.x86_64.rpm SHA-256: a845ea331846e2ab04c49fbf0d1dfb21e670b0bfa65c5d705571b99292e16de1
ia64
ImageMagick-6.0.7.1-16.ia64.rpm SHA-256: 9b856c851a68246997c5a8ecf086ae7054bf9f890bf5652010fcd074619d1ddd
ImageMagick-c++-6.0.7.1-16.ia64.rpm SHA-256: cdec216e3bd2208c7052e1299a9fb5aa3a84426d5c9e4e5c91e0ab253b1ba479
ImageMagick-c++-devel-6.0.7.1-16.ia64.rpm SHA-256: 293421847d98e50739969515252057bbf80ea056ecaa0a72c40edd23e79b0de6
ImageMagick-devel-6.0.7.1-16.ia64.rpm SHA-256: 95d3f688dde457312b3222530d46b1138a9da7bfd909d17922739b2dedd29f2a
ImageMagick-perl-6.0.7.1-16.ia64.rpm SHA-256: 6f6fa2b7d7409819b45a536708d7e68d733ce6d0058d960fd83439ca366646cb
i386
ImageMagick-6.0.7.1-16.i386.rpm SHA-256: 9e314bbc53a8d789c401cbaf6157a743f9d07397cdc5234b2ea5546e94e4022d
ImageMagick-c++-6.0.7.1-16.i386.rpm SHA-256: 1aadacdb3328c2e29c070ba2f6332258823a88815df2e524e868dabe92d73f5e
ImageMagick-c++-devel-6.0.7.1-16.i386.rpm SHA-256: 3c273de752fef48d7dda0899ac9486dee03ec7f699bfdc653bde549b0cd07bb0
ImageMagick-devel-6.0.7.1-16.i386.rpm SHA-256: 53d928c783f4358b0e73ad9645394fef5db2743c5429c75aa8f4dcee40fbf8e3
ImageMagick-perl-6.0.7.1-16.i386.rpm SHA-256: 5118f97f58fe2af9eb06809af5baeb035e2d3eb37578a47490e1746919ee1817

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ImageMagick-6.0.7.1-16.x86_64.rpm SHA-256: f82ab742f8f82ae67e83f81945700f4914ff392136bbfa679c7c270214e65e22
ImageMagick-c++-6.0.7.1-16.x86_64.rpm SHA-256: 34064355b5b28a47bb7e8373497372391a8b070c9348e6bcf5e505e29ba8d840
ImageMagick-c++-devel-6.0.7.1-16.x86_64.rpm SHA-256: 0fa3a970012491b730170dbc8d5e8dde5312d263802e973f120e2b4e269d54ab
ImageMagick-devel-6.0.7.1-16.x86_64.rpm SHA-256: 38854133dcbf90b3f8e2753098b7c5ce2c0c9176dd5fd60b15d2ce2cea5893a9
ImageMagick-perl-6.0.7.1-16.x86_64.rpm SHA-256: a845ea331846e2ab04c49fbf0d1dfb21e670b0bfa65c5d705571b99292e16de1
i386
ImageMagick-6.0.7.1-16.i386.rpm SHA-256: 9e314bbc53a8d789c401cbaf6157a743f9d07397cdc5234b2ea5546e94e4022d
ImageMagick-c++-6.0.7.1-16.i386.rpm SHA-256: 1aadacdb3328c2e29c070ba2f6332258823a88815df2e524e868dabe92d73f5e
ImageMagick-c++-devel-6.0.7.1-16.i386.rpm SHA-256: 3c273de752fef48d7dda0899ac9486dee03ec7f699bfdc653bde549b0cd07bb0
ImageMagick-devel-6.0.7.1-16.i386.rpm SHA-256: 53d928c783f4358b0e73ad9645394fef5db2743c5429c75aa8f4dcee40fbf8e3
ImageMagick-perl-6.0.7.1-16.i386.rpm SHA-256: 5118f97f58fe2af9eb06809af5baeb035e2d3eb37578a47490e1746919ee1817

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ImageMagick-6.0.7.1-16.s390x.rpm SHA-256: c9ed0df64397f8522ef7352d0322a2edd03f8e3ad3c65865df5b0b044b3938d0
ImageMagick-c++-6.0.7.1-16.s390x.rpm SHA-256: 29b60dddd150c6c8f8e46ee1a57fc3944693e4a9bb3be530c8d76f7ae609a4a4
ImageMagick-c++-devel-6.0.7.1-16.s390x.rpm SHA-256: a3425c37c20528bb09c78af1c5f5988e14589595c5cc3960b1baa9aa3f895406
ImageMagick-devel-6.0.7.1-16.s390x.rpm SHA-256: a5437d0d7f54240898c9e9a45f82c6d691d637f1fb587322dc3c3003e8466f5e
ImageMagick-perl-6.0.7.1-16.s390x.rpm SHA-256: 44a293dc5ce8747203c1c192d420ae1a3b2061cf306e52f7d07b0e60e8bb0211
s390
ImageMagick-6.0.7.1-16.s390.rpm SHA-256: 0ca2a08daf70add4137d8e15beaa85047bf6152b060337e0b0a063b5dc62d510
ImageMagick-c++-6.0.7.1-16.s390.rpm SHA-256: 7b165a08a961c37412c2ae146e4bf2e8e6ca2bb886ce7bbc473751e53e142cbd
ImageMagick-c++-devel-6.0.7.1-16.s390.rpm SHA-256: fbbd60b5c38dddd74c28b4b4e7c1b3ec7df58b35cc20df5ebcc5dbb339f7ad1e
ImageMagick-devel-6.0.7.1-16.s390.rpm SHA-256: cbaab50fac646ff614351a608fb4828433310599ac6b881a7ae58c5055450aa5
ImageMagick-perl-6.0.7.1-16.s390.rpm SHA-256: 11649f7689ad2dfeff14b3fd94f3906c425332eacc72b1748aa78a05e5d1e850

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ImageMagick-6.0.7.1-16.ppc.rpm SHA-256: eb3a15750c4b3ca9e5ec850de1ffc3ad96d11ff50591cdd01740c4f23ccb4b3b
ImageMagick-c++-6.0.7.1-16.ppc.rpm SHA-256: 65c4cdea719ee6b03ac9554322717ca9057658ecafcd4d953ffccd72e61dfc75
ImageMagick-c++-devel-6.0.7.1-16.ppc.rpm SHA-256: b1c323d3c72cd4b00490bc29aa15df6a1b141cc70e2abf33e0ba561af2415545
ImageMagick-devel-6.0.7.1-16.ppc.rpm SHA-256: eca3295da3461d333f52fe0d4ab8109feca65ae423213bea1bba505f2776d610
ImageMagick-perl-6.0.7.1-16.ppc.rpm SHA-256: 60d0f9bbf8aa2c1b830e1c37259011e5f2955c78112dbddddf38108bb48c718c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.