RHSA-2005:332-01: Low: xloadimage security update

A xloadimage security updates has been released for Red Hat Enterprise Linux 2.1, 3, and 4

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Low: xloadimage security update
Advisory ID: RHSA-2005:332-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-332.html
Issue date: 2005-04-19
Updated on: 2005-04-19
Product: Red Hat Enterprise Linux
----------------------------------------------------------------------

1. Summary:

A new xloadimage package that fixes bugs in handling malformed tiff and pbm/pnm/ppm images, and in handling metacharacters in filenames is now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Problem description:

The xloadimage utility displays images in an X Window System window, loads images into the root window, or writes images into a file. Xloadimage supports many image types (including GIF, TIFF, JPEG, XPM, and XBM).

A flaw was discovered in xloadimage where filenames were not properly quoted when calling the gunzip command. An attacker could create a file with a carefully crafted filename so that it would execute arbitrary commands if opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0638 to this issue.

Another bug in xloadimage would cause it to crash if called with certain invalid TIFF, PNM, PBM, or PPM file names.

All users of xloadimage should upgrade to this erratum package which contains backported patches to correct these issues.

4. Solution:

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

5. Bug IDs fixed (http://bugzilla.redhat.com/):

70867 - xloadimage crashes with some TIFF images
78481 - bad source code
150700 - CAN-2005-0638 xloadimage multiple issues.

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1AS/en/os/SRPMS/xloadimage-4.1-34.RHEL2.1.src.rpm
d2eb22454e48b2bbd107dbdeaecd150f xloadimage-4.1-34.RHEL2.1.src.rpm

i386:
2f7688a2128fc6bd10b673c1798a10c0 xloadimage-4.1-34.RHEL2.1.i386.rpm

ia64:
2c0e34b4153373e4a8a4796a4c4f9a37 xloadimage-4.1-34.RHEL2.1.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1AW/en/os/SRPMS/xloadimage-4.1-34.RHEL2.1.src.rpm
d2eb22454e48b2bbd107dbdeaecd150f xloadimage-4.1-34.RHEL2.1.src.rpm

ia64:
2c0e34b4153373e4a8a4796a4c4f9a37 xloadimage-4.1-34.RHEL2.1.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1ES/en/os/SRPMS/xloadimage-4.1-34.RHEL2.1.src.rpm
d2eb22454e48b2bbd107dbdeaecd150f xloadimage-4.1-34.RHEL2.1.src.rpm

i386:
2f7688a2128fc6bd10b673c1798a10c0 xloadimage-4.1-34.RHEL2.1.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1WS/en/os/SRPMS/xloadimage-4.1-34.RHEL2.1.src.rpm
d2eb22454e48b2bbd107dbdeaecd150f xloadimage-4.1-34.RHEL2.1.src.rpm

i386:
2f7688a2128fc6bd10b673c1798a10c0 xloadimage-4.1-34.RHEL2.1.i386.rpm

Red Hat Enterprise Linux AS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/xloadimage-4.1-34.RHEL3.src.rpm
dff8d26de1ae31c9ef9dfff276d7eefc xloadimage-4.1-34.RHEL3.src.rpm

i386:
66984fbb0c083b6a41c95a35f1d947df xloadimage-4.1-34.RHEL3.i386.rpm

ia64:
755fcd3b8bc4fb54407080ce3f71f91f xloadimage-4.1-34.RHEL3.ia64.rpm

ppc:
b7b938ccbbdb8227bf88b77a26dcc72e xloadimage-4.1-34.RHEL3.ppc.rpm

s390:
114ddcc6a744e66ce32e2108b1848380 xloadimage-4.1-34.RHEL3.s390.rpm

s390x:
31af253c70481647d7e187a9721cd4a3 xloadimage-4.1-34.RHEL3.s390x.rpm

x86_64:
22c8dadca67da257bdcc7e3662ced66b xloadimage-4.1-34.RHEL3.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/xloadimage-4.1-34.RHEL3.src.rpm
dff8d26de1ae31c9ef9dfff276d7eefc xloadimage-4.1-34.RHEL3.src.rpm

i386:
66984fbb0c083b6a41c95a35f1d947df xloadimage-4.1-34.RHEL3.i386.rpm

x86_64:
22c8dadca67da257bdcc7e3662ced66b xloadimage-4.1-34.RHEL3.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/xloadimage-4.1-34.RHEL3.src.rpm
dff8d26de1ae31c9ef9dfff276d7eefc xloadimage-4.1-34.RHEL3.src.rpm

i386:
66984fbb0c083b6a41c95a35f1d947df xloadimage-4.1-34.RHEL3.i386.rpm

ia64:
755fcd3b8bc4fb54407080ce3f71f91f xloadimage-4.1-34.RHEL3.ia64.rpm

x86_64:
22c8dadca67da257bdcc7e3662ced66b xloadimage-4.1-34.RHEL3.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/xloadimage-4.1-34.RHEL3.src.rpm
dff8d26de1ae31c9ef9dfff276d7eefc xloadimage-4.1-34.RHEL3.src.rpm

i386:
66984fbb0c083b6a41c95a35f1d947df xloadimage-4.1-34.RHEL3.i386.rpm

ia64:
755fcd3b8bc4fb54407080ce3f71f91f xloadimage-4.1-34.RHEL3.ia64.rpm

x86_64:
22c8dadca67da257bdcc7e3662ced66b xloadimage-4.1-34.RHEL3.x86_64.rpm

Red Hat Enterprise Linux AS version 4:

SRPMS:
ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/xloadimage-4.1-34.RHEL4.src.rpm
1962fb476bb6811815214fbed4ad3463 xloadimage-4.1-34.RHEL4.src.rpm

i386:
dab6f11d887e16813812e05265f3cedb xloadimage-4.1-34.RHEL4.i386.rpm

ia64:
bb65b21e826b58cbe0d5d9caaf5fe391 xloadimage-4.1-34.RHEL4.ia64.rpm

ppc:
e942f6b4820bee4c5edac5b248c83a2e xloadimage-4.1-34.RHEL4.ppc.rpm

s390:
8e1efa9db15da7545e9e4a84314eb289 xloadimage-4.1-34.RHEL4.s390.rpm

s390x:
5c8438c9abffb0e6054a1292440a2bc0 xloadimage-4.1-34.RHEL4.s390x.rpm

x86_64:
f55355574c8802e01e64b11279bf4a94 xloadimage-4.1-34.RHEL4.x86_64.rpm

Red Hat Enterprise Linux Desktop version 4:

SRPMS:
ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/xloadimage-4.1-34.RHEL4.src.rpm
1962fb476bb6811815214fbed4ad3463 xloadimage-4.1-34.RHEL4.src.rpm

i386:
dab6f11d887e16813812e05265f3cedb xloadimage-4.1-34.RHEL4.i386.rpm

x86_64:
f55355574c8802e01e64b11279bf4a94 xloadimage-4.1-34.RHEL4.x86_64.rpm

Red Hat Enterprise Linux ES version 4:

SRPMS:
ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/xloadimage-4.1-34.RHEL4.src.rpm
1962fb476bb6811815214fbed4ad3463 xloadimage-4.1-34.RHEL4.src.rpm

i386:
dab6f11d887e16813812e05265f3cedb xloadimage-4.1-34.RHEL4.i386.rpm

ia64:
bb65b21e826b58cbe0d5d9caaf5fe391 xloadimage-4.1-34.RHEL4.ia64.rpm

x86_64:
f55355574c8802e01e64b11279bf4a94 xloadimage-4.1-34.RHEL4.x86_64.rpm

Red Hat Enterprise Linux WS version 4:

SRPMS:
ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/xloadimage-4.1-34.RHEL4.src.rpm
1962fb476bb6811815214fbed4ad3463 xloadimage-4.1-34.RHEL4.src.rpm

i386:
dab6f11d887e16813812e05265f3cedb xloadimage-4.1-34.RHEL4.i386.rpm

ia64:
bb65b21e826b58cbe0d5d9caaf5fe391 xloadimage-4.1-34.RHEL4.ia64.rpm

x86_64:
f55355574c8802e01e64b11279bf4a94 xloadimage-4.1-34.RHEL4.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package

7. Contact:

The Red Hat security contact is lt;secalert@redhat.comgt;. More contact details at https://www.redhat.com/security/team/contact/

Copyright 2005 Red Hat, Inc.