Red Hat Security AdvisoryRHSA-2009:0012
netpbm security update
Released 2009-02-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) netpbm-10.35-6.1.el5_3.1, netpbm-10.35-6.1.el5_3.1.i386, netpbm-10.35-6.1.el5_3.1.ia64 +9
- Red Hat Enterprise Linux AS version 4 netpbm-10.25-2.1.el4_7.4, netpbm-10.25-2.1.el4_7.4.i386, netpbm-10.25-2.1.el4_7.4.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) netpbm-10.35-6.1.el5_3.1, netpbm-10.35-6.1.el5_3.1.i386, netpbm-progs-10.35-6.1.el5_3.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) netpbm-10.35-6.1.el5_3.1, netpbm-devel-10.35-6.1.el5_3.1, netpbm-devel-10.35-6.1.el5_3.1.i386
- Red Hat Enterprise Linux Desktop version 4 netpbm-10.25-2.1.el4_7.4, netpbm-10.25-2.1.el4_7.4.i386, netpbm-devel-10.25-2.1.el4_7.4 +3
- Red Hat Enterprise Linux ES version 4 netpbm-10.25-2.1.el4_7.4, netpbm-10.25-2.1.el4_7.4.i386, netpbm-10.25-2.1.el4_7.4.ia64 +6
- Red Hat Enterprise Linux WS version 4 netpbm-10.25-2.1.el4_7.4, netpbm-10.25-2.1.el4_7.4.i386, netpbm-10.25-2.1.el4_7.4.ia64 +6
Fixes 2 records
Priority MEDIUM 46
Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03214 · Published 2008-10-02 · Fixed CWE-189
Priority LOW 24
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via mal…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02271 · Published 2007-05-16 · Fixed
