Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Slackware: 2022-056-02 Critical: ImageMagick Code Execution Risk

slackware
Calendar Grey April 11, 2011
Dist Slackware Esm H88
LibTiff libraries have been revamped for Slackware to mitigate severe security vulnerabilities that could lead to unauthorized code execution.
New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues

Summary

Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libtiff-3.9.4-i486-2_slack13.1.txz: Rebuilt. Patched overflows that could lead to arbitrary code execution when parsing a malformed image file. For more information, see: https://www.cve.org/CVERecord?id=CVE-2011-0192 https://www.cve.org/CVERecord?id=CVE-2011-1167 (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical code execution slackware image processing

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware 11.0:
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware -current:
...

Read the Full Advisory

MD5 Signatures

Slackware 9.0 package: 12e422015601177213c20fabecdb3dca libtiff-3.8.2-i386-3_slack9.0.tgz
Slackware 9.1 package: 60824a9f63a4027950adfc2a95b79a8f libtiff-3.8.2-i486-3_slack9.1.tgz
Slackware 10.0 package: 2e7a80f8831edc8d4d23bb8c9947f34a libtiff-3.8.2-i486-3_slack10.0.tgz
Slackware 10.1 package: 71e592bb0d6aa91d9f507df2dbe07ec7 libtiff-3.8.2-i486-3_slack10.1.tgz
Slackware 10.2 package: e069711795313bcba59be6b17e4f570e libtiff-3.8.2-i486-3_slack10.2.tgz
Slackware 11.0 package: 5221a6dc0bdf39e94eb98c060811844e libtiff-3.8.2-i486-4_slack11.0.tgz
Slackware 12.0 package: 33afedaeb6bd3dfc009a6fff697532b5 libtiff-3.8.2-i486-5_slack12.0.tgz
Slackware 12.1 package: 3b2bd1c0663d635e54dc3bd859ece30a libtiff-3.8.2-i486-5_slack12.1.tgz
Slackware 12.2 package: 7e587b0f33749947092ffec1557aace0 libtiff-3.8.2-i486-5_slack12.2.tgz
Slackware 13.0 package: b35b2ed471ca18b51ac7b3fdb7c61722 libtiff-3.8.2-i486-5_slack13.0.txz
Slackware x86_64 13.0 package: 45b63bc3d470aab873be4adddc677bba libtiff-3.8.2-x86_64-5_slack13.0.txz
Slackware 13.1 package: 7eeddc014de94b49752017c56ccc573f libtiff-3.9.4-i486-2_slack13.1.txz
Slackware x86_64 13.1 package: 54580a13f5074f62887e1adf3f03fdba libtiff-3.9.4-x86_64-2_slack13.1.txz
Slackware -current package: c72b2d22fb7c5593150cb384424df247 libtiff-3.9.4-i486-2.txz
Slackware x86_64 -current package: edd9ed456af33471073f69c68f99163a libtiff-3.9.4-x86_64-2.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical code execution slackware image processing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg libtiff-3.9.4-i486-2_slack13.1.txz

Related News

Your message here