netpbm-10.35-6.1AXS3.1

エラータID: AXSA:2009-24:01

Release date: 
Friday, March 13, 2009 - 20:22
Subject: 
netpbm-10.35-6.1AXS3.1
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
Moderate
Description: 

The netpbm package contains a library of functions which support programs for handling various graphics file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable pixmaps) and others.
Fixed bugs:
CVE-2007-2721
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.
CVE-2008-3520
Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.

Solution: 

Update packages.

CVEs: 
CVE-2007-2721
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.
CVE-2008-3520
Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.
Additional Info: 

N/A

Download: 

SRPMS
  1. netpbm-10.35-6.1AXS3.1.src.rpm
    MD5: d9f05b1fd8b639f147c65f2ba7c96706
    SHA-256: 099dbc5b2f657367aa78391adfb1c63d0bf869efee9e110f0ff9592afb07eb81
    Size: 2.31 MB

Asianux Server 3 for x86
  1. netpbm-10.35-6.1AXS3.1.i386.rpm
    MD5: 83bca4f32760c76ce0ce5a90dd379f3b
    SHA-256: dad5cbaefe96833f394807970df9fc519b986d5c71051fe44c14de58614fc1d6
    Size: 140.91 kB
  2. netpbm-devel-10.35-6.1AXS3.1.i386.rpm
    MD5: a6c61523bc6082caf2100ede9e9c70f4
    SHA-256: 6accf440dccc825f342fb65ed391159de4b439a1fa2f7db6e9f84a5cfaceca70
    Size: 167.94 kB
  3. netpbm-progs-10.35-6.1AXS3.1.i386.rpm
    MD5: a137dddf4b659c7910777f1dbabc8d17
    SHA-256: 3654af7113eee343ab92e788fc9a1a4d5a952f5a03f3dd0fa644696b26039b38
    Size: 2.01 MB

Asianux Server 3 for x86_64
  1. netpbm-10.35-6.1AXS3.1.x86_64.rpm
    MD5: 7748a3d9e9f7784c8c41bde167f18431
    SHA-256: 112a97891e473c1544a7af265d98412b53a38a444cff79b02284056c2ec50772
    Size: 142.01 kB
  2. netpbm-devel-10.35-6.1AXS3.1.x86_64.rpm
    MD5: d8868345212bd59faf8796064cdd7bc4
    SHA-256: 896f731d37b032289af3d444f31322dcd38fb16026365dda93ea05b990ca1d93
    Size: 170.89 kB
  3. netpbm-progs-10.35-6.1AXS3.1.x86_64.rpm
    MD5: 01eb9810ef9cc5cf6eeaa425d766fb02
    SHA-256: 7a8157e98b7c1312bf2e5316ef5591412eeb058ea796ce9be25e43a0b8eb396d
    Size: 2.02 MB