=========================================================== Ubuntu Security Notice USN-481-1 July 10, 2007 imagemagick vulnerabilities CVE-2007-1667, CVE-2007-1797 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libmagick9 6:6.2.4.5-0.6ubuntu0.6 Ubuntu 6.10: libmagick9 7:6.2.4.5.dfsg1-0.10ubuntu0.3 Ubuntu 7.04: libmagick9 7:6.2.4.5.dfsg1-0.14ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Multiple vulnerabilities were found in ImageMagick's handling of DCM and WXD image files. By tricking a user into processing a specially crafted image with an application that uses imagemagick, an attacker could execute arbitrary code with the user's privileges. Updated packages for Ubuntu 6.06 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5-0.6ubuntu0.6.diff.gz Size/MD5: 39268 d58d313987a066dd86df9b74d3d381e8 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5-0.6ubuntu0.6.dsc Size/MD5: 914 5c539bc0d8e2cc52fe855d5f9b5e63ac http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.orig.tar.gz Size/MD5: 6085147 8d790a280f355489d0cfb6d36ce6751f amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5-0.6ubuntu0.6_amd64.deb Size/MD5: 1616218 929e8078d8bba1f03eb3734a86d12237 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5-0.6ubuntu0.6_amd64.deb Size/MD5: 249430 e39f04adfb6fc9ed8c480066134edf85 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5-0.6ubuntu0.6_amd64.deb Size/MD5: 170242 cca72534252d50115e312e3d1ad6b8d1 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5-0.6ubuntu0.6_amd64.deb Size/MD5: 1704122 0337592e131f9e3850f53656fb2262fe http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5-0.6ubuntu0.6_amd64.deb Size/MD5: 1349102 289ff8bddf146faad3c60d06bb6e1d2c http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5-0.6ubuntu0.6_amd64.deb Size/MD5: 172082 2b64b93869789fa438c542292f68f393 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5-0.6ubuntu0.6_i386.deb Size/MD5: 1614958 98f7bcdd3151c5596f5e69c186e59586 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5-0.6ubuntu0.6_i386.deb Size/MD5: 227330 3bb64f5491f07cfa5569d4bb6206d878 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5-0.6ubuntu0.6_i386.deb Size/MD5: 168798 2c0d2f0cfdeff9318df323ae524c1819 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5-0.6ubuntu0.6_i386.deb Size/MD5: 1557540 fe90a0e2e16e0e15398022d9cd334673 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5-0.6ubuntu0.6_i386.deb Size/MD5: 1249124 724d4eee4af75a03a5085ca37ea7cb2e http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5-0.6ubuntu0.6_i386.deb Size/MD5: 167466 7006c9f4de34bf647f569003fef86ca2 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5-0.6ubuntu0.6_powerpc.deb Size/MD5: 1619914 6c7133fd5890e8f722799464f68eee20 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5-0.6ubuntu0.6_powerpc.deb Size/MD5: 251614 faa5eef311a9382696c4e94c06c62cd9 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5-0.6ubuntu0.6_powerpc.deb Size/MD5: 162608 ed08b43e6f3ce095d1581370f6c10f3c http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5-0.6ubuntu0.6_powerpc.deb Size/MD5: 1908620 48d307b2b8631b4a669be1322e5607bc http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5-0.6ubuntu0.6_powerpc.deb Size/MD5: 1285056 2108f1a2044f78f4d180d7070807f256 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5-0.6ubuntu0.6_powerpc.deb Size/MD5: 166472 f566c136b1ef95629e794a406d21b29c sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5-0.6ubuntu0.6_sparc.deb Size/MD5: 1615972 ef034a5a75bd5a0a44d20bca9d0d962c http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5-0.6ubuntu0.6_sparc.deb Size/MD5: 229448 9302d5b800651254aefac294b4fba8a6 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5-0.6ubuntu0.6_sparc.deb Size/MD5: 167490 8c1259985a276f9d86b0e5ff5b46a6f8 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5-0.6ubuntu0.6_sparc.deb Size/MD5: 1809180 57823f107f4e713000ee1ab528805649 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5-0.6ubuntu0.6_sparc.deb Size/MD5: 1345326 69e88733176575bc82cebae8e41cdf13 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5-0.6ubuntu0.6_sparc.deb Size/MD5: 169178 b9a4b752ea434aa31f58b5a5ea997bb4 Updated packages for Ubuntu 6.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.10ubuntu0.3.diff.gz Size/MD5: 90910 68231bacd7a5ae7403c410b26b97cd5d http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.10ubuntu0.3.dsc Size/MD5: 953 8bc479de9c7cf4477feed5757e395649 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1.orig.tar.gz Size/MD5: 5203463 2c5d3723d25c4119cf003efce2161c56 amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.10ubuntu0.3_amd64.deb Size/MD5: 742874 ba93dd4b28a65d5553395fc071069a48 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_amd64.deb Size/MD5: 247822 4ce7e0b0a80817bf2a0b07ee6ee7106f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.10ubuntu0.3_amd64.deb Size/MD5: 170290 2cf91dcc2291a48132c79ede01c2a821 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_amd64.deb Size/MD5: 1684874 7b79405bed4c5b119c773cd05f2ad437 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.10ubuntu0.3_amd64.deb Size/MD5: 1331060 434269bee34224e27b985397c4f2b127 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.10ubuntu0.3_amd64.deb Size/MD5: 172320 8407dcbf05d46267ad3db6f569ad12d3 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.10ubuntu0.3_i386.deb Size/MD5: 742350 3de4b95e2c34286aed4dabea43a66f37 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_i386.deb Size/MD5: 227370 27f1140db9c32cfdb9826702979d1bf2 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.10ubuntu0.3_i386.deb Size/MD5: 169206 2df7b39d6703f5be49b4750f5c9d0642 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_i386.deb Size/MD5: 1592362 a2472a4bc137b54f890456c722f4bbe4 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.10ubuntu0.3_i386.deb Size/MD5: 1286408 993c92fde74d2c49c1b27cf6cf7b4138 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.10ubuntu0.3_i386.deb Size/MD5: 167864 03de16b72602ca86639f129b68ed2010 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.10ubuntu0.3_powerpc.deb Size/MD5: 746384 4c9052fab557b9fb5043c3f61fda12e6 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_powerpc.deb Size/MD5: 251640 fe50cdb17ecdb95a3030ebe770610394 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.10ubuntu0.3_powerpc.deb Size/MD5: 162824 9f5552448f54a0b11343fe5a68a0b297 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_powerpc.deb Size/MD5: 1920416 1fa8980dcd30479361f48d04668e1c6f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.10ubuntu0.3_powerpc.deb Size/MD5: 1297270 ae9c2d7231176a9515fa5e0d308bba04 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.10ubuntu0.3_powerpc.deb Size/MD5: 168534 c6708a1db384e0029b820515970ebd01 sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.10ubuntu0.3_sparc.deb Size/MD5: 742356 2f9012b1a65e7b3fcfe2e0d3ae231808 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_sparc.deb Size/MD5: 229220 d977c5fcfe31f6291d90c08f4b8ed086 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.10ubuntu0.3_sparc.deb Size/MD5: 167862 247d9134a39c1338d2e3a0cfb5b1d70b http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.10ubuntu0.3_sparc.deb Size/MD5: 1856368 9624df4328326451a8364a54908fb4aa http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.10ubuntu0.3_sparc.deb Size/MD5: 1384114 3b73571c431cb0a881e48f02f6e101af http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.10ubuntu0.3_sparc.deb Size/MD5: 174052 1b3a93163afe20f5af6479814b99fdce Updated packages for Ubuntu 7.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.14ubuntu0.1.diff.gz Size/MD5: 92877 726d9ec77f113467bd12cfd556dfb8ed http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.14ubuntu0.1.dsc Size/MD5: 1119 6c3001a574f419da593c64503dc9dd83 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1.orig.tar.gz Size/MD5: 5203463 2c5d3723d25c4119cf003efce2161c56 amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.14ubuntu0.1_amd64.deb Size/MD5: 740084 9ca3843dda7671083ec3d4bf5c4cca25 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_amd64.deb Size/MD5: 248162 799228a0036b584376c505e3a9e37a98 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.14ubuntu0.1_amd64.deb Size/MD5: 188124 a73c7b23186f8e7b3c51c43cd06a1893 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_amd64.deb Size/MD5: 1685500 9227ea6a244f6abd8aaff4f8396a13c4 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.14ubuntu0.1_amd64.deb Size/MD5: 1342200 05a7170dd3aa1ee9d033638bdb30a974 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.14ubuntu0.1_amd64.deb Size/MD5: 173146 61a714fc8b6ed3e35cc276802c48a2a9 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.14ubuntu0.1_i386.deb Size/MD5: 738958 ce4ea61a6c2020fd872e30c9053095d1 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_i386.deb Size/MD5: 227728 b5575f4f450f33dc3505ab83da1a1c89 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.14ubuntu0.1_i386.deb Size/MD5: 192160 8eb13fcf1e30e454f22680fcdd797d79 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_i386.deb Size/MD5: 1592142 64055813edba778b47c090fea4a08510 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.14ubuntu0.1_i386.deb Size/MD5: 1298348 59c70ba63832a7e113aa75ae91c83e96 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.14ubuntu0.1_i386.deb Size/MD5: 168772 ba626726f77801bbaaad34ea0da33af2 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.14ubuntu0.1_powerpc.deb Size/MD5: 749606 19927653bda821a3e53e1b14533a154f http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_powerpc.deb Size/MD5: 251980 2bd0927abe6037eb44a5c50c2b84a89d http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.14ubuntu0.1_powerpc.deb Size/MD5: 201626 9571ff5ebb5fb9278220b3fc1d490e44 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_powerpc.deb Size/MD5: 1919402 5c1631f5041ea5fc1afe4ee3c31a694d http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.14ubuntu0.1_powerpc.deb Size/MD5: 1356302 d877997e9a359e8d4a8369a8f2dc0c65 http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.14ubuntu0.1_powerpc.deb Size/MD5: 172354 f1b12a9ae07afa9463e81ea61c483259 sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/imagemagick_6.2.4.5.dfsg1-0.14ubuntu0.1_sparc.deb Size/MD5: 740004 ade74dbedd5735024319615f795ea685 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_sparc.deb Size/MD5: 229548 e73c1da68756893ae985580b83798a0c http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick++9c2a_6.2.4.5.dfsg1-0.14ubuntu0.1_sparc.deb Size/MD5: 192338 2d8893d93abd4f436dd9725ecab583d6 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9-dev_6.2.4.5.dfsg1-0.14ubuntu0.1_sparc.deb Size/MD5: 1855028 2aadfd4c48c26ca5f2adb8a263fcd391 http://security.ubuntu.com/ubuntu/pool/main/i/imagemagick/libmagick9_6.2.4.5.dfsg1-0.14ubuntu0.1_sparc.deb Size/MD5: 1395850 2b019d49426477dfefac43271f64fa7f http://security.ubuntu.com/ubuntu/pool/universe/i/imagemagick/perlmagick_6.2.4.5.dfsg1-0.14ubuntu0.1_sparc.deb Size/MD5: 174738 8d8e5a5fbc178404ad9b5838cbb28054
Attachment:
signature.asc
Description: Digital signature