[SECURITY] Fedora Core 5 Update: ImageMagick-6.2.5.4-4.2.1.fc5.2

[Matthias Clasen]

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-588
2006-05-24
---------------------------------------------------------------------

Product     : Fedora Core 5
Name        : ImageMagick
Version     : 6.2.5.4                      
Release     : 4.2.1.fc5.2                  
Summary     : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X
Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,
and Photo CD image formats. It can resize, rotate, sharpen, color
reduce, or add special effects to an image, and when finished you can
either save the completed work in the original format or a different
one. ImageMagick also includes command line programs for creating
animated or transparent .gifs, creating composite images, creating
thumbnail images, and more.

ImageMagick is one of your choices if you need a program to manipulate
and dis play images. If you want to develop your own applications
which use ImageMagick code or APIs, you need to install
ImageMagick-devel as well.

---------------------------------------------------------------------
Update Information:

ImageMagick's DisplayImageCommand contains a heap 
overflow flaw.  It is possible to pass an unexpanded 
glob to ImageMagick which will be expanded by ImageMagick 
and overflow heap memory.

The updated packages fix this problem.
---------------------------------------------------------------------
* Wed May 24 2006 Matthias Clasen <mclasen at redhat.com> - 6.2.5.4-4.2.1.fc4.2
- Fix a heap overflow CVE-2006-2440 (#192279)
* Mon Mar 20 2006 Matthias Clasen <mclasen at redhat.com> - 6.2.5.4-4.2.1.fc5.1
- Don't ship .la files (#185237)

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

661af9c27bddf7922c24ee3806f4b3c99770f62c  SRPMS/ImageMagick-6.2.5.4-4.2.1.fc5.2.src.rpm
bd113e9c8c21fb9a6160dca1bd54a660ed6b96bc  ppc/ImageMagick-6.2.5.4-4.2.1.fc5.2.ppc.rpm
0ae707429f364805fe661d2735253be7e96b1755  ppc/ImageMagick-devel-6.2.5.4-4.2.1.fc5.2.ppc.rpm
0f07a39532b6fbd8fcfa86eabe6001df3e9574c6  ppc/ImageMagick-perl-6.2.5.4-4.2.1.fc5.2.ppc.rpm
9314c4fc1404998b613410f03d264e34900c28e7  ppc/ImageMagick-c++-6.2.5.4-4.2.1.fc5.2.ppc.rpm
f1af28deb167e996f41b007ae6f7254fd8cbe3aa  ppc/ImageMagick-c++-devel-6.2.5.4-4.2.1.fc5.2.ppc.rpm
88a0cc790ff8ed05d054a2af200b4a4539632807  ppc/debug/ImageMagick-debuginfo-6.2.5.4-4.2.1.fc5.2.ppc.rpm
3df6175a3171455690d1ec94c4e8b62dad2da478  ppc/ImageMagick-6.2.5.4-4.2.1.fc5.2.ppc64.rpm
b1aa9dcd545e968222476666fdfb62ca8636f5ff  ppc/ImageMagick-c++-6.2.5.4-4.2.1.fc5.2.ppc64.rpm
213c7721ef313a8eac5819cd212d4b2904002077  x86_64/ImageMagick-6.2.5.4-4.2.1.fc5.2.x86_64.rpm
c1108f4867dafdab3c063bbe38a26df6a0bb0573  x86_64/ImageMagick-devel-6.2.5.4-4.2.1.fc5.2.x86_64.rpm
2fbe154c53b0f81308b850fd50bb371035742c21  x86_64/ImageMagick-perl-6.2.5.4-4.2.1.fc5.2.x86_64.rpm
38ad446cbc9013b0da69fb8896ec2db57470e053  x86_64/ImageMagick-c++-6.2.5.4-4.2.1.fc5.2.x86_64.rpm
77cea7a1c33d92c964ec9c3bd39d04b38a23001a  x86_64/ImageMagick-c++-devel-6.2.5.4-4.2.1.fc5.2.x86_64.rpm
5804fe6d59393d39fb81951af11a2bfd9fa2b7bf  x86_64/debug/ImageMagick-debuginfo-6.2.5.4-4.2.1.fc5.2.x86_64.rpm
0f7e4b69d28268e84eab5227703b9de3c8b28e21  i386/ImageMagick-6.2.5.4-4.2.1.fc5.2.i386.rpm
19b73417b01283fca29f2a45ca3ae82b9d860a46  i386/ImageMagick-devel-6.2.5.4-4.2.1.fc5.2.i386.rpm
4c6c56a91835764e336836a0c76269dbf719bc25  i386/ImageMagick-perl-6.2.5.4-4.2.1.fc5.2.i386.rpm
a37cf2f89716f889cc84feda7ae37b3260a141f1  i386/ImageMagick-c++-6.2.5.4-4.2.1.fc5.2.i386.rpm
80c0eb208b1e707941b2137621c87da04a7d816a  i386/ImageMagick-c++-devel-6.2.5.4-4.2.1.fc5.2.i386.rpm
d844dca416ba1fa791c255592f51b51ba4c9b362  i386/debug/ImageMagick-debuginfo-6.2.5.4-4.2.1.fc5.2.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------