User: Password:
|
|
Subscribe / Log in / New account

Ubuntu alert USN-372-1 (imagemagick)

From:  Martin Pitt <martin.pitt@canonical.com>
To:  ubuntu-security-announce@lists.ubuntu.com
Subject:  [USN-372-1] imagemagick vulnerability
Date:  Wed, 1 Nov 2006 12:23:43 +0100
Cc:  full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com

=========================================================== Ubuntu Security Notice USN-372-1 November 01, 2006 imagemagick vulnerability CVE-2006-5456 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LTS Ubuntu 6.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 5.04: libmagick6 6:6.0.6.2-2.1ubuntu1.5 Ubuntu 5.10: libmagick6 6:6.2.3.4-1ubuntu1.4 Ubuntu 6.06 LTS: libmagick9 6:6.2.4.5-0.6ubuntu0.3 Ubuntu 6.10: libmagick9 7:6.2.4.5.dfsg1-0.10ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: M. Joonas Pihlaja discovered that ImageMagick did not sufficiently verify the validity of PALM and DCM images. When processing a specially crafted image with an application that uses imagemagick, this could be exploited to execute arbitrary code with the application's privileges. Updated packages for Ubuntu 5.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 144502 96cdc6266e29aa2ba91e09adc67a3c2a http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 899 6bb10253b54d9b68b99ab5e117d0bb86 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 6824001 477a361ba0154cc2423726fab4a3f57c amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1466726 30529972b274e75f686f38aab2e27e36 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 229236 13fa208a5cb5f6acdfd271836b39e2f0 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 164022 e4b7c3ed32275b45e7a982bc9be16710 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1551474 6a6e325d036aa7369e42ea7bc60223b4 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1195388 38967817dd23a96f6cbbe996c26d86bc http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 232262 3ae7c25400744ee24260453e4a952406 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1465348 e4330a298179425f3d88db6f308f6520 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 209222 879366413a35554aed05bcf9f27f038b http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 164516 21497849c6a53e77db86cf217ce5d81a http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1454216 12f86d30660e81477ead1ac3e4ed383c http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1140964 c289aa3e81f0d5106d2fd9d23ba1795e http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 232642 8b317e6dfe26d08b31bc536d2c083827 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1472140 b3b445e1a7af2910ed9e7f8be844f909 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 228208 99d28d5a4b541a032d52754eebe7aba9 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 157202 e5553dbb2bf94dac87e16114652f029f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1686432 ad415b90f40c1ab31e023f1df6adcb4e http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1170248 7a16caf06e3834dffccc4652cd302993 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 270978 caebe7cef826261b11fb068008ed60b9 Updated packages for Ubuntu 5.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 143918 8dd23724e67f3bddc3aa84605f0cf6ca http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 899 58b91b7ec00b5d0483ce070f1e8388bc http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 5769194 7e9a3edd467a400a74126eb4a18e31ef amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1333988 953a195e7ae503626c3320dde7ed72cd http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 259426 1ce1270fd1c49e1fa024db846961f89f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 171470 b3ad7733bfca4788ec88a2fd08ec2a2a http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1671122 ace2bb83eb946dad1e7f012335d67943 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1320760 d493aac8bd7dd16cca3096f5d9f835fe http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 169552 143d04e6a8035168db89f360e2051903 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1332978 f5ca133a3cb76d652890107068d574c9 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 235898 3f80065faaddcd92662c9f6df86b48ab http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 170780 21bc4938d624abefecbca9afe4f1d09e http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1522028 ac538e3ea0f6aef84770fbbced0c6072 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1224692 8b4e831c757e7b305f72605cb48e02e4 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 164840 90d8363550b649be4705859523e9a02d powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1337886 0aecb181a2b3b7f52a23155510ade72f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 260388 71d0ac72531c2254b8e304142f417af3 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 164022 28092bac7b94dabc59dca24df10d7cdc http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1874510 39c305e0addd1a94284dcde33ab9df14 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1258286 39cbb88bc58c3280e4401ed9116860e8 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 163992 c3d41c62be266f2c3fe9c266461b545c sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1333190 ac554f62e1686ed621a4bab21369f882 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 237060 9f9ff69dfc760f18e3eb8b6a6603fa91 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 168936 a2f50904d9d1637907c7d2e103556d28 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1782272 7f03f5d6d7d9018d7c5e5237b93f6c05 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1323962 9106e33d17d389e0626da180ec012701 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 166308 d78a02bd5ed9ff975bf7cb3cab6632d8 Updated packages for Ubuntu 6.06 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 35130 1faf498a57ec6e5ea18e0c072cf9a8d9 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 916 a4f711630724113301dbfeb2df4395e0 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 6085147 8d790a280f355489d0cfb6d36ce6751f amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1615954 2149178d9fd28897a3c6fd2c491e9446 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 249206 1ff95a0af9f962edaee38ccfc856c564 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 170104 8ccdedbe851271b799534d38fa8aef30 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1702484 31c88d7cf9159809dec0265e537973ac http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1347912 04536a33add640f7b564b50d33336bea http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 171830 176568b8c0ebece007649cef8951c08a i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1614696 e1b8f9848856a58f55fae279565dc076 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 227008 3ff3355410937ac247eee0fe4a9a4365 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 168354 58b9bee7ed0d3bd618044e9340e9d7f5 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1555878 98034bd5a96af0678965806cd168494c http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1246892 c2e40b0384bbc3340cd92121338704a1 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 167218 826e884e629bd435974a0b20fd44fe6b powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1619690 3dfc04ee370a409652df16a60f55bdf5 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 251396 2cac68d5d4e7cf88b85840030017b5a2 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 162346 e7c2100db6cca74fca43befa56ca3135 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1905896 857f0ca00902dbb2195a7f95c84b17ba http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1283792 89ea0de0689c8cbc0917897c29814081 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 166220 f2837b5763a471a65ee4cffd251a1503 sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1615312 1d393ab5bb9789c53d104a7200aadcb3 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 229182 f56aac12573aa0a8477f6a732ff215b8 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 167186 69fa08c7e568bea4961fc7fee4bff779 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1807408 bfc3327e022be55b55824cf9b7f078c6 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1343696 8449022de57855311a3c13ac77f90354 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 168932 2b90f44f162105b1770a144f12240025 Updated packages for Ubuntu 6.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 86939 0273702247d7029c19088435a1188690 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 953 bf00204c47b4e2dd48f2280e458b9820 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 5203463 2c5d3723d25c4119cf003efce2161c56 amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 742750 8e706a5eeaeee60ecfff5c704fd9ed6f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 247648 a9819de3bafafb2a7855c957fbf13593 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 170128 5d5e867d47238a09a3e9fab4e402b171 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1683534 f8150bfa217135f714c68970b365ee68 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1330040 81ce158df2d4bd616081489a1a30ac30 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 172158 122abf0e656fe204bcf32c0f249e5cde i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 742224 fcf8dcb974fa4347a31e69487a21e6c3 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 227188 b6bd454c5bd7a6a1b8cd1c0e43a0ec89 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 168936 67eee244ac112b7edd7ddadd25fa5353 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1591000 e99e8b130b7fec1522ab151281418f67 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1285390 67b32783d2f0000da5b522c10253bfa9 http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 167698 c4989f6e88349832aaf50bce0380c3f2 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 746286 fb8c901a8cdd6f41cca02ac7b54b361d http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 251506 6a600c74335588865deb38857dc92a24 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 162654 3a31cfd5f5ed88277ca5e1b336eb4d0d http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1918166 1e7529e780454da1ef84b3d70c86b9b4 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1296618 7a76234a2cacec2e3790c02d09084e4b http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 168368 9513e0612c2f3d75f0bdc4144a8967e5 sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 742250 1d039fa163cdf20c97d84102c5eb2af3 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 229050 fb7f29883dd5a5f99d419592383ab4f9 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 167680 8a7570a56925c201d594cf3c771ce34e http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1854042 4357668480e4dd2e05d1e58895513330 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick... Size/MD5: 1382884 5dda6687e4de0884de79d1529b146e8b http://security.ubuntu.com/ubuntu/pool/universe/i/imagema... Size/MD5: 173864 531d3f68c8cb859291a66f7657402e67 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...


(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds