Red Hat Security AdvisoryRHSA-2011:1811
netpbm security update
Released 2011-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) netpbm-10.35.58-8.el5_7.3, netpbm-devel-10.35.58-8.el5_7.3, netpbm-devel-10.35.58-8.el5_7.3.i386
- Red Hat Enterprise Linux (v. 5 server) netpbm-10.35.58-8.el5_7.3, netpbm-10.35.58-8.el5_7.3.i386, netpbm-10.35.58-8.el5_7.3.ia64 +9
- Red Hat Enterprise Linux AS version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-10.35.58-8.el4.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) netpbm-10.35.58-8.el5_7.3, netpbm-10.35.58-8.el5_7.3.i386, netpbm-progs-10.35.58-8.el5_7.3 +1
- Red Hat Enterprise Linux Desktop version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-devel-10.35.58-8.el4 +3
- Red Hat Enterprise Linux ES version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-10.35.58-8.el4.ia64 +6
- Red Hat Enterprise Linux WS version 4 netpbm-10.35.58-8.el4, netpbm-10.35.58-8.el4.i386, netpbm-10.35.58-8.el4.ia64 +6
Fixes 3 records
Priority MEDIUM 43
The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute a…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.10487 · Published 2011-12-15 · Fixed CWE-787
Priority MEDIUM 43
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.10487 · Published 2011-12-15 · Fixed CWE-787
Priority MEDIUM 40
Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image fi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04539 · Published 2010-02-12 · Partial fix CWE-119
THREATIST.IORead the docs