Bug 151265

Summary:	CAN-2005-0397 ImageMagick format string flaw
Product:	[Fedora] Fedora	Reporter:	Matthias Clasen <mclasen>
Component:	ImageMagick	Assignee:	Matthias Clasen <mclasen>
Status:	CLOSED ERRATA	QA Contact:	Mike McLean <mikem>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3	CC:	marius.andreiana
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-08-20 07:30:22 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	150185
Bug Blocks:

Description Matthias Clasen 2005-03-16 15:48:20 UTC

+++ This bug was initially created as a clone of Bug #150185 +++

Gentoo reported an ImageMagick format string flaw reported in their
bugzilla.  This will only affect ImageMagick when it's passed
untrusted filenames, so perhaps by other utilities.

Also affects RHEL3, RHEL2.1 (although code is slightly different)

Comment 1 Matthias Clasen 2005-03-17 21:48:02 UTC

Covered by RHSA-2005:070-09, RHSA-2005:320-06

Comment 2 Marius Andreiana 2005-08-20 07:30:22 UTC

ImageMagick-6.2.2.0-2 released on 26-May-2005 is in updates