Bugtraqmailing list archives
[USN-62-1] imagemagick vulnerability
From: Martin Pitt <martin.pitt () canonical com>
Date: Tue, 18 Jan 2005 18:00:35 +0100
===========================================================Ubuntu Security Notice USN-62-1 January 18, 2005imagemagick vulnerabilityCAN-2005-0005===========================================================A security issue affects the following Ubuntu releases:Ubuntu 4.10 (Warty Warthog)The following packages are affected:imagemagicklibmagick6The problem can be corrected by upgrading the affected package toversion 5:6.0.2.5-1ubuntu1.3. In general, a standard system upgrade issufficient to effect the necessary changes.Details follow:Andrei Nigmatulin discovered a potential buffer overflow in thePhotoShop Document image decoding function of ImageMagick. Decoding amalicious PSD image which specifies more than the allowed 24 channelsmight result in execution of arbitrary code with the user'sprivileges.Since ImageMagick can be used in custom printing systems, this alsomight lead to privilege escalation (execute code with the printerspooler's privileges). However, Ubuntu's standard printing system doesnot use ImageMagick, thus there is no risk of privilege escalation ina standard installation. Source archives:http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.0.2.5-1ubuntu1.3.diff.gz Size/MD5: 129613 75352895a302e3f3723d9cd406777f7bhttp://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.0.2.5-1ubuntu1.3.dsc Size/MD5: 874 8fd92a6825c03eec507f03c5b933ecc3http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.0.2.5.orig.tar.gz Size/MD5: 6700454 207fdb75b6c106007cc483cf15e619ad amd64 architecture (Athlon64, Opteron, EM64T Xeon)http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.0.2.5-1ubuntu1.3_amd64.deb Size/MD5: 1366208 c2be7fe40f56510b730c8d978e15d5fahttp://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++6-dev_6.0.2.5-1ubuntu1.3_amd64.deb Size/MD5: 226522 fa3f732d24cd647e1ace4b376f1bb7f7http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++6_6.0.2.5-1ubuntu1.3_amd64.deb Size/MD5: 161096 bd4a4038b4df6bec15a830142bc7ba7ahttp://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick6-dev_6.0.2.5-1ubuntu1.3_amd64.deb Size/MD5: 1519992 6d374d3d29c3e1000996999aec3b33b1http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick6_6.0.2.5-1ubuntu1.3_amd64.deb Size/MD5: 1167334 5f8b7b2640ba6d14b17ed0912291ddc3http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.0.2.5-1ubuntu1.3_amd64.deb Size/MD5: 138710 f7cef8050c694e474ccf9261378ba30f i386 architecture (x86 compatible Intel/AMD)http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.0.2.5-1ubuntu1.3_i386.deb Size/MD5: 1366118 f607e0df49c6135b5102a709bc2cdb86http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++6-dev_6.0.2.5-1ubuntu1.3_i386.deb Size/MD5: 206634 55e3d9f8c4d0d7464cdbc7605af94686http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++6_6.0.2.5-1ubuntu1.3_i386.deb Size/MD5: 162832 c900291894be3775990daf17e592137fhttp://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick6-dev_6.0.2.5-1ubuntu1.3_i386.deb Size/MD5: 1425788 780ff037e17809b06ecdee21a39d9228http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick6_6.0.2.5-1ubuntu1.3_i386.deb Size/MD5: 1115830 42a211f5e1c07f4c0fd820c30c01c497http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.0.2.5-1ubuntu1.3_i386.deb Size/MD5: 137272 a977911d2f48337e64ab72f119f51dc2 powerpc architecture (Apple Macintosh G3/G4/G5)http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.0.2.5-1ubuntu1.3_powerpc.deb Size/MD5: 1371386 9eadcc224574cbcc5a5ca9d7c82dcdc0http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++6-dev_6.0.2.5-1ubuntu1.3_powerpc.deb Size/MD5: 225288 e0f72079ba0c18ae6bc31d5e85c940aahttp://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++6_6.0.2.5-1ubuntu1.3_powerpc.deb Size/MD5: 154596 add2a438f6f9635bce870a40c8577c86http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick6-dev_6.0.2.5-1ubuntu1.3_powerpc.deb Size/MD5: 1660674 bb2a732f815bf30e96ac4b4557b0c595http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick6_6.0.2.5-1ubuntu1.3_powerpc.deb Size/MD5: 1151774 35cf821f073d7ed882a8c4c6d94365dahttp://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.0.2.5-1ubuntu1.3_powerpc.deb Size/MD5: 136202 f8859166433ecc7b0bdc5ffa76ce8395
Attachment:signature.asc
Description: Digital signature
Current thread:
- [USN-62-1] imagemagick vulnerabilityMartin Pitt (Jan 19)