Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Scientific Linux: CVE-2007-2721 Moderate Update: Netpbm Integer Overflow

Calendar Feb 11, 2009 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate issue integer overflow netpbm Scientific Linux
Moderate: netpbm security update 
Date: Wed, 11 Feb 2009 14:02:50 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: FASTBUGS for SL 5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

The following FASTBUGS have been uploaded to

 i386:
module-init-tools-3.3-0.pre3.1.37.el5_2.1.i386.rpm
dos2unix-3.1-27.2.el5.i386.rpm
hwbrowser-0.30-3.el5.noarch.rpm
system-config-date-1.8.12-4.el5.noarch.rpm
 x86_64:
module-init-tools-3.3-0.pre3.1.37.el5_2.1.x86_64.rpm
dos2unix-3.1-27.2.el5.x86_64.rpm
hwbrowser-0.30-3.el5.noarch.rpm
system-config-date-1.8.12-4.el5.noarch.rpm

-Connie Sieh
-Troy Dawson
Date: Wed, 11 Feb 2009 14:25:09 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: netpbm on SL4.x, SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: netpbm security update
Issue date:	2009-02-11
CVE Names:	CVE-2007-2721 CVE-2008-3520

An input validation flaw and multiple integer overflows were discovered
in the JasPer library providing support for JPEG-2000 image format and
used in the jpeg2ktopam and pamtojpeg2k converters. An attacker could
create a carefully-crafted JPEG file which could cause jpeg2ktopam to
crash or, possibly, execute arbitrary code as the user running
jpeg2ktopam. (CVE-2007-2721, CVE-2008-3520)

SL 4.x

 SRPMS:
netpbm-10.25-2.1.el4_7.4.src.rpm
 i386:
netpbm-10.25-2.1.el4_7.4.i386.rpm
netpbm-devel-10.25-2.1.el4_7.4.i386.rpm
netpbm-progs-10.25-2.1.el4_7.4.i386.rpm
 x86_64:
netpbm-10.25-2.1.el4_7.4.i386.rpm
netpbm-10.25-2.1.el4_7.4.x86_64.rpm
netpbm-devel-10.25-2.1.el4_7.4.x86_64.rpm
netpbm-progs-10.25-2.1.el4_7.4.x86_64.rpm

SL 5.x

 SRPMS:
netpbm-10.35-6.1.el5_3.1.src.rpm
 i386:
netpbm-10.35-6.1.el5_3.1.i386.rpm
netpbm-devel-10.35-6.1.el5_3.1.i386.rpm
netpbm-progs-10.35-6.1.el5_3.1.i386.rpm
 x86_64:
netpbm-10.35-6.1.el5_3.1.i386.rpm
netpbm-10.35-6.1.el5_3.1.x86_64.rpm
netpbm-devel-10.35-6.1.el5_3.1.i386.rpm
netpbm-devel-10.35-6.1.el5_3.1.x86_64.rpm
netpbm-progs-10.35-6.1.el5_3.1.x86_64.rpm

-Connie Sieh
-Troy Dawson