Описание
ELSA-2008-0145: ImageMagick security update (MODERATE)
[6.2.8.0-4.el5_1.1]
- backport functionality for CVE patches
- Add patch for CVE-2007-1797 (#235071)
- Add patch for CVE-2007-4988 (#310081)
- Add patch for CVE-2007-4985 (#310091)
- Add patch for CVE-2007-4986 (#310121)
- Add patch for CVE-2008-1096 (#286411)
- Add patch for CVE-2008-1097 (#285861)
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
ImageMagick
6.2.8.0-4.el5_1.1
ImageMagick-c++
6.2.8.0-4.el5_1.1
ImageMagick-c++-devel
6.2.8.0-4.el5_1.1
ImageMagick-devel
6.2.8.0-4.el5_1.1
ImageMagick-perl
6.2.8.0-4.el5_1.1
Oracle Linux x86_64
ImageMagick
6.2.8.0-4.el5_1.1
ImageMagick-c++
6.2.8.0-4.el5_1.1
ImageMagick-c++-devel
6.2.8.0-4.el5_1.1
ImageMagick-devel
6.2.8.0-4.el5_1.1
ImageMagick-perl
6.2.8.0-4.el5_1.1
Oracle Linux i386
ImageMagick
6.2.8.0-4.el5_1.1
ImageMagick-c++
6.2.8.0-4.el5_1.1
ImageMagick-c++-devel
6.2.8.0-4.el5_1.1
ImageMagick-devel
6.2.8.0-4.el5_1.1
ImageMagick-perl
6.2.8.0-4.el5_1.1
Ссылки на источники
Связанные уязвимости
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote ...
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.