| [Security Announce] MDKA-2006:031 - Updated ImageMagick packages fix infinite loop issue |
|
|
|
| Écrit par Administrator |
| Mardi, 01 Août 2006 22:50 |
|
_______________________________________________________________________ Mandriva Linux Advisory MDKA-2006:031 http://www.mandriva.com/security/ _______________________________________________________________________ Package : ImageMagick Date : July 31, 2006 Affected: Corporate 3.0 _______________________________________________________________________ Problem Description: ImageMagick-5.5.7, in the ReadTIFFImage function, was found to be susceptible to a condition that consumes 100% of the system cpu if attempting to view a carefully crafted tif image using the "display" or "identify" programs. This has already been addressed in newer versions of ImageMagick and only effects the Corp3 products. The updated packages have been patched to correct these issues. _______________________________________________________________________ References: http://qa.mandriva.com/show_bug.cgi?id=24016 _______________________________________________________________________ Updated Packages: Corporate 3.0: fd80fcd87b2b523efc8d9521b24feba2 corporate/3.0/RPMS/ImageMagick-5.5.7.15-6.6.C30mdk.i586.rpm 78c17a0ffa5ccc30c4068efdfe736fc3 corporate/3.0/RPMS/ImageMagick-doc-5.5.7.15-6.6.C30mdk.i586.rpm 371bdacaa57d02b7edb66a91fa70b632 corporate/3.0/RPMS/libMagick5.5.7-5.5.7.15-6.6.C30mdk.i586.rpm 7e7c036756f56fc72602fb2812e9a2d1 corporate/3.0/RPMS/libMagick5.5.7-devel-5.5.7.15-6.6.C30mdk.i586.rpm ddee1bb640da67fa72cff2e92ebd4982 corporate/3.0/RPMS/perl-Magick-5.5.7.15-6.6.C30mdk.i586.rpm 9cfbc88ac9d2fef00705d23e306393f5 corporate/3.0/SRPMS/ImageMagick-5.5.7.15-6.6.C30mdk.src.rpm Corporate 3.0/X86_64: 27403874eba816c11b66e22434e88d80 x86_64/corporate/3.0/RPMS/ImageMagick-5.5.7.15-6.6.C30mdk.x86_64.rpm ea4dd6ab6e7d1441abdeb8d2090f9396 x86_64/corporate/3.0/RPMS/ImageMagick-doc-5.5.7.15-6.6.C30mdk.x86_64.rpm 133cbbf96320273fe98d24e250577358 x86_64/corporate/3.0/RPMS/lib64Magick5.5.7-5.5.7.15-6.6.C30mdk.x86_64.rpm 985816a4a57ff1eada9d9174c5746674 x86_64/corporate/3.0/RPMS/lib64Magick5.5.7-devel-5.5.7.15-6.6.C30mdk.x86_64.rpm 4aba40f647d437541903485b48dbb92d x86_64/corporate/3.0/RPMS/perl-Magick-5.5.7.15-6.6.C30mdk.x86_64.rpm 9cfbc88ac9d2fef00705d23e306393f5 x86_64/corporate/3.0/SRPMS/ImageMagick-5.5.7.15-6.6.C30mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ |




























































