Objavljena je nova inačica programskog paketa ImageMagick. Na taj su način otklonjeni problemi koji su napadaču omogućavali uskraćivanje usluge odnosno gašenje programa.
Paket:
ImageMagick 6.x
Operacijski sustavi:
Fedora 17
Kritičnost:
3.7
Problem:
pogreška u programskoj funkciji, pogreška u programskoj komponenti
Iskorištavanje:
lokalno/udaljeno
Posljedica:
uskraćivanje usluga (DoS)
Rješenje:
programska zakrpa proizvođača
CVE:
CVE-2012-3437, CVE-2012-0259, CVE-2012-1620
Izvorni ID preporuke:
FEDORA-2012-11762
Izvor:
Fedora
Problem:
Uzrok propusta su pogreške u funkcijama Magick_png_malloc i GetEXIFProperty, te komponenti slock 0.9 koja nepravilno rukuje XRaiseWindow događajima.
Posljedica:
Napadač je mogao iskoristiti nedostatke kako bi izveo napad uskraćivanjem usluge (DoS).
Rješenje:
Savjetuje se instalacija posljednje objavljene inačice.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-11762
2012-08-13 01:43:30
--------------------------------------------------------------------------------
Name : ImageMagick
Product : Fedora 17
Version : 6.7.5.6
Release : 4.fc17
URL : http://www.imagemagick.org/
Summary : An X application for displaying and manipulating images
Description :
ImageMagick is an image display and manipulation tool for the X
Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,
and Photo CD image formats. It can resize, rotate, sharpen, color
reduce, or add special effects to an image, and when finished you can
either save the completed work in the original format or a different
one. ImageMagick also includes command line programs for creating
animated or transparent .gifs, creating composite images, creating
thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate
and display images. If you want to develop your own applications
which use ImageMagick code or APIs, you need to install
ImageMagick-devel as well.
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2012-3437 ImageMagick: Magick_png_malloc() size argument
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 11 2012 Pavel Alexeev <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 6.7.5.6-4
- Fix CVE-2012-3437 (bz#844101, 844103)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #844101 - CVE-2012-3437 ImageMagick: Magick_png_malloc() size argument
https://bugzilla.redhat.com/show_bug.cgi?id=844101
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ImageMagick' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-11746
2012-08-13 01:42:34
--------------------------------------------------------------------------------
Name : ImageMagick
Product : Fedora 16
Version : 6.7.0.10
Release : 6.fc16
URL : http://www.imagemagick.org/
Summary : An X application for displaying and manipulating images
Description :
ImageMagick is an image display and manipulation tool for the X
Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,
and Photo CD image formats. It can resize, rotate, sharpen, color
reduce, or add special effects to an image, and when finished you can
either save the completed work in the original format or a different
one. ImageMagick also includes command line programs for creating
animated or transparent .gifs, creating composite images, creating
thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate
and display images. If you want to develop your own applications
which use ImageMagick code or APIs, you need to install
ImageMagick-devel as well.
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2012-3437 ImageMagick: Magick_png_malloc() size argument
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 11 2012 Pavel Alexeev <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 6.7.0.10-6
- Fix CVE-2012-3437 (bz#844101, 844103)
* Tue Jun 12 2012 Pavel Alexeev <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 6.7.0.10-5
- Add Patch3: ImageMagick-6.7.0-10-CVE-2012-0259.patch - http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629 (bz#807993)
- And Patch4: ImageMagick-6.7.0-10-CVE-2012-1620.patch - http://www.imagemagick.org/discourse-server/viewtopic.php?p=82865#p82865 (bz#807993)
* Wed Nov 2 2011 Orion Poplawski <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 6.7.0.10-4
- Patch delegates.xml for ffmpeg (bug #750383)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #844101 - CVE-2012-3437 ImageMagick: Magick_png_malloc() size argument
https://bugzilla.redhat.com/show_bug.cgi?id=844101
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ImageMagick' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Posljednje sigurnosne preporuke