Issued:
2007-02-15
Updated:
2007-02-15

RHSA-2007:0015 - Security Advisory

Synopsis

Moderate: ImageMagick security update

Type/Severity

Security Advisory: Moderate

Topic

Updated ImageMagick packages that correct several security issues are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

ImageMagick is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

Several security flaws were discovered in the way ImageMagick decodes DCM,
PALM, and SGI graphic files. An attacker may be able to execute arbitrary
code on a victim's machine if they were able to trick the victim into
opening a specially crafted image file (CVE-2006-5456, CVE-2006-5868).

A heap overflow flaw was found in ImageMagick. An attacker may be able to
execute arbitrary code on a victim's machine if they were able to trick the
victim into opening a specially crafted file (CVE-2006-2440). This issue
only affected the version of ImageMagick distributed with Red Hat
Enterprise Linux 4.

Users of ImageMagick should upgrade to these updated packages, which
contain backported patches to correct these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 192278 - CVE-2006-2440 ImageMagick heap overflow
  • BZ - 210921 - CVE-2006-5456 Overflows in GraphicsMagick and ImageMagick's DCM and PALM handling routines
  • BZ - 217558 - CVE-2006-5868 Insufficient boundary check in ImageMagick's SGIDecode()

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ImageMagick-6.0.7.1-16.0.3.x86_64.rpm SHA-256: d00af1e4fda4a13acc048e4389c929f20a74f375a830e40a11173c4b3d724b3a
ImageMagick-6.0.7.1-16.0.3.x86_64.rpm SHA-256: d00af1e4fda4a13acc048e4389c929f20a74f375a830e40a11173c4b3d724b3a
ImageMagick-c++-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 27da5f2a377f79b3b699a94727b744676ac98749937ae9d3559ea0ee38668742
ImageMagick-c++-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 27da5f2a377f79b3b699a94727b744676ac98749937ae9d3559ea0ee38668742
ImageMagick-c++-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 938e15ae5f0b50fd274e12495056ad60cab437a264fb2a704f7e9128b92bb003
ImageMagick-c++-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 938e15ae5f0b50fd274e12495056ad60cab437a264fb2a704f7e9128b92bb003
ImageMagick-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: ddd9ff925d0a926631ad0cc9a78972e46dbd7adcceb2802e0ea10da6c29cc828
ImageMagick-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: ddd9ff925d0a926631ad0cc9a78972e46dbd7adcceb2802e0ea10da6c29cc828
ImageMagick-perl-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 9c9e704877832cf894f9b3d42a2404e8fb5554616b40aa773072952999560a30
ImageMagick-perl-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 9c9e704877832cf894f9b3d42a2404e8fb5554616b40aa773072952999560a30
ia64
ImageMagick-6.0.7.1-16.0.3.ia64.rpm SHA-256: 72779f88d2416308e889252026034cfa3f9ae0610f6e4a2c50e98b8146c0b262
ImageMagick-6.0.7.1-16.0.3.ia64.rpm SHA-256: 72779f88d2416308e889252026034cfa3f9ae0610f6e4a2c50e98b8146c0b262
ImageMagick-c++-6.0.7.1-16.0.3.ia64.rpm SHA-256: 5e3394867ccb2846bd85049d932bb888d1e4f686b817e83c4bcc9ac8fc7f48f4
ImageMagick-c++-6.0.7.1-16.0.3.ia64.rpm SHA-256: 5e3394867ccb2846bd85049d932bb888d1e4f686b817e83c4bcc9ac8fc7f48f4
ImageMagick-c++-devel-6.0.7.1-16.0.3.ia64.rpm SHA-256: 03841fe3e7ff2326201da01197ee7f0bafd28f28512f71e8956e1d10f385b407
ImageMagick-c++-devel-6.0.7.1-16.0.3.ia64.rpm SHA-256: 03841fe3e7ff2326201da01197ee7f0bafd28f28512f71e8956e1d10f385b407
ImageMagick-devel-6.0.7.1-16.0.3.ia64.rpm SHA-256: ae7eb742b9839a6d6e26240062ae3e8eb7313d9be99f38bb4181112b4b932ba5
ImageMagick-devel-6.0.7.1-16.0.3.ia64.rpm SHA-256: ae7eb742b9839a6d6e26240062ae3e8eb7313d9be99f38bb4181112b4b932ba5
ImageMagick-perl-6.0.7.1-16.0.3.ia64.rpm SHA-256: 9308614d3062596eb9ddb3463cf674e90510f00b2d67be080b2d0049040d338c
ImageMagick-perl-6.0.7.1-16.0.3.ia64.rpm SHA-256: 9308614d3062596eb9ddb3463cf674e90510f00b2d67be080b2d0049040d338c
i386
ImageMagick-6.0.7.1-16.0.3.i386.rpm SHA-256: 010fd33a528c79e2dcd8711cfc661b6e7a629042ce7fec678291e5fd2374f57c
ImageMagick-6.0.7.1-16.0.3.i386.rpm SHA-256: 010fd33a528c79e2dcd8711cfc661b6e7a629042ce7fec678291e5fd2374f57c
ImageMagick-c++-6.0.7.1-16.0.3.i386.rpm SHA-256: 5a38bcf8980db5cc2d1ebc16cb679928aca2463b3f06a81f6d3719c4462d878a
ImageMagick-c++-6.0.7.1-16.0.3.i386.rpm SHA-256: 5a38bcf8980db5cc2d1ebc16cb679928aca2463b3f06a81f6d3719c4462d878a
ImageMagick-c++-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 07bb864e362b8203f6dc48b2391adcd22394011b91059d0929e61c6083d8ee9a
ImageMagick-c++-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 07bb864e362b8203f6dc48b2391adcd22394011b91059d0929e61c6083d8ee9a
ImageMagick-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 813fc753511ef1aaa91c0e8aee0f72f1e1053d89a95e3db326e8190265b56465
ImageMagick-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 813fc753511ef1aaa91c0e8aee0f72f1e1053d89a95e3db326e8190265b56465
ImageMagick-perl-6.0.7.1-16.0.3.i386.rpm SHA-256: 6fab914fd3915f04b7c0c9f8e84154c0648c906b015648e1f1a5852b81f65e9a
ImageMagick-perl-6.0.7.1-16.0.3.i386.rpm SHA-256: 6fab914fd3915f04b7c0c9f8e84154c0648c906b015648e1f1a5852b81f65e9a

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ImageMagick-6.0.7.1-16.0.3.x86_64.rpm SHA-256: d00af1e4fda4a13acc048e4389c929f20a74f375a830e40a11173c4b3d724b3a
ImageMagick-c++-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 27da5f2a377f79b3b699a94727b744676ac98749937ae9d3559ea0ee38668742
ImageMagick-c++-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 938e15ae5f0b50fd274e12495056ad60cab437a264fb2a704f7e9128b92bb003
ImageMagick-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: ddd9ff925d0a926631ad0cc9a78972e46dbd7adcceb2802e0ea10da6c29cc828
ImageMagick-perl-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 9c9e704877832cf894f9b3d42a2404e8fb5554616b40aa773072952999560a30
ia64
ImageMagick-6.0.7.1-16.0.3.ia64.rpm SHA-256: 72779f88d2416308e889252026034cfa3f9ae0610f6e4a2c50e98b8146c0b262
ImageMagick-c++-6.0.7.1-16.0.3.ia64.rpm SHA-256: 5e3394867ccb2846bd85049d932bb888d1e4f686b817e83c4bcc9ac8fc7f48f4
ImageMagick-c++-devel-6.0.7.1-16.0.3.ia64.rpm SHA-256: 03841fe3e7ff2326201da01197ee7f0bafd28f28512f71e8956e1d10f385b407
ImageMagick-devel-6.0.7.1-16.0.3.ia64.rpm SHA-256: ae7eb742b9839a6d6e26240062ae3e8eb7313d9be99f38bb4181112b4b932ba5
ImageMagick-perl-6.0.7.1-16.0.3.ia64.rpm SHA-256: 9308614d3062596eb9ddb3463cf674e90510f00b2d67be080b2d0049040d338c
i386
ImageMagick-6.0.7.1-16.0.3.i386.rpm SHA-256: 010fd33a528c79e2dcd8711cfc661b6e7a629042ce7fec678291e5fd2374f57c
ImageMagick-c++-6.0.7.1-16.0.3.i386.rpm SHA-256: 5a38bcf8980db5cc2d1ebc16cb679928aca2463b3f06a81f6d3719c4462d878a
ImageMagick-c++-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 07bb864e362b8203f6dc48b2391adcd22394011b91059d0929e61c6083d8ee9a
ImageMagick-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 813fc753511ef1aaa91c0e8aee0f72f1e1053d89a95e3db326e8190265b56465
ImageMagick-perl-6.0.7.1-16.0.3.i386.rpm SHA-256: 6fab914fd3915f04b7c0c9f8e84154c0648c906b015648e1f1a5852b81f65e9a

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ImageMagick-6.0.7.1-16.0.3.x86_64.rpm SHA-256: d00af1e4fda4a13acc048e4389c929f20a74f375a830e40a11173c4b3d724b3a
ImageMagick-c++-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 27da5f2a377f79b3b699a94727b744676ac98749937ae9d3559ea0ee38668742
ImageMagick-c++-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 938e15ae5f0b50fd274e12495056ad60cab437a264fb2a704f7e9128b92bb003
ImageMagick-devel-6.0.7.1-16.0.3.x86_64.rpm SHA-256: ddd9ff925d0a926631ad0cc9a78972e46dbd7adcceb2802e0ea10da6c29cc828
ImageMagick-perl-6.0.7.1-16.0.3.x86_64.rpm SHA-256: 9c9e704877832cf894f9b3d42a2404e8fb5554616b40aa773072952999560a30
i386
ImageMagick-6.0.7.1-16.0.3.i386.rpm SHA-256: 010fd33a528c79e2dcd8711cfc661b6e7a629042ce7fec678291e5fd2374f57c
ImageMagick-c++-6.0.7.1-16.0.3.i386.rpm SHA-256: 5a38bcf8980db5cc2d1ebc16cb679928aca2463b3f06a81f6d3719c4462d878a
ImageMagick-c++-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 07bb864e362b8203f6dc48b2391adcd22394011b91059d0929e61c6083d8ee9a
ImageMagick-devel-6.0.7.1-16.0.3.i386.rpm SHA-256: 813fc753511ef1aaa91c0e8aee0f72f1e1053d89a95e3db326e8190265b56465
ImageMagick-perl-6.0.7.1-16.0.3.i386.rpm SHA-256: 6fab914fd3915f04b7c0c9f8e84154c0648c906b015648e1f1a5852b81f65e9a

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ImageMagick-6.0.7.1-16.0.3.s390x.rpm SHA-256: 406fbba2566cef08f6c50035eabef67d6dde6a5d43d4e6697eb21aa1a8ef3631
ImageMagick-c++-6.0.7.1-16.0.3.s390x.rpm SHA-256: 4332da870412d9dc0dbd34af2f5810490131dd5ae41519514072f81bfbc5ac6f
ImageMagick-c++-devel-6.0.7.1-16.0.3.s390x.rpm SHA-256: 36edd6499b7c246590669f8c7e94aeb6db5ecd4dcd4ba0d0a43d8298d288cae1
ImageMagick-devel-6.0.7.1-16.0.3.s390x.rpm SHA-256: 352988c22346e3961eeef5d81f4d5336116e266a0c7f7e512bc1d1604cf1c2c0
ImageMagick-perl-6.0.7.1-16.0.3.s390x.rpm SHA-256: a243b1b6c310dab1bf08fa25f86c91fe00e3253aa6d9a7614abb36835ce8509f
s390
ImageMagick-6.0.7.1-16.0.3.s390.rpm SHA-256: 71d8abcdc29cb38e8f6567ad77577fc80aa408986813f0a8ff718aed3dc59c3a
ImageMagick-c++-6.0.7.1-16.0.3.s390.rpm SHA-256: ed630549aa59ff796e09f166dc351a1dcbede6fb4fe16f8168b858ad1b58a18b
ImageMagick-c++-devel-6.0.7.1-16.0.3.s390.rpm SHA-256: 2ec0d621e7eddd81abd587743483651c91dc9bd7250604fad69ebbe10481f575
ImageMagick-devel-6.0.7.1-16.0.3.s390.rpm SHA-256: 6a37b00a6d3a0778051b52643e41ed9de85eca1ea313bc064e7680d45890480d
ImageMagick-perl-6.0.7.1-16.0.3.s390.rpm SHA-256: ae85a32000b749d1612f63293cc62a3ab0957295deeafe4107058e2f873c82ce

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ImageMagick-6.0.7.1-16.0.3.ppc.rpm SHA-256: a661f4ce3bf0e87a6217ca5b7cb3ebfe5c349dfee98a6d46aaed58eb38dce594
ImageMagick-c++-6.0.7.1-16.0.3.ppc.rpm SHA-256: 7e50cd72d515f41fb8f6ee3b851538c323798a1534bdf64c9c23b472ab784086
ImageMagick-c++-devel-6.0.7.1-16.0.3.ppc.rpm SHA-256: 450426fb5b16219ed4619b564e5ddd649a3f668fb965dab7a8feddb006c114c4
ImageMagick-devel-6.0.7.1-16.0.3.ppc.rpm SHA-256: 0a5136b674505cc3196e88a5fa2a79d7bc991ea3111f76d2840b49192248f909
ImageMagick-perl-6.0.7.1-16.0.3.ppc.rpm SHA-256: 50bc26fe50f975eb2bcc39b0e68107a5d980ed32746d80b97903a23d604d5e37

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.