Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.

- Thu Apr 24 2008 Steven Pritchard <steve at kspei.com>     0.64-2

    - Rebuild.

    - Thu Apr 24 2008 Steven Pritchard <steve at kspei.com>       0.64-1

    - Update to 0.64 (CVE-2008-1928).

    - Add versioned Test::More BR.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Thu Apr 24 2008 Steven Pritchard <steve at kspei.com>     0.64-2

    - Rebuild.

    - Thu Apr 24 2008 Steven Pritchard <steve at kspei.com>       0.64-1

    - Update to 0.64 (CVE-2008-1928).

    - Add versioned Test::More BR.

    - Thu Mar 6 2008 Tom 'spot' Callaway <tcallawa at       redhat.com> - 0.62-3

    - rebuild for new perl

    - Tue Feb 19 2008 Fedora Release Engineering <rel-eng at       fedoraproject.org> - 0.62-2

    - Autorebuild for GCC 4.3

    - Tue Dec 11 2007 Steven Pritchard <steve at kspei.com>       0.62-1

    - Update to 0.62.

    - Update License tag.

    - Mon Sep 17 2007 Steven Pritchard <steve at kspei.com>       0.60-1

    - Update to 0.60.

    - Wed Aug 29 2007 Fedora Release Engineering <rel-eng at       fedoraproject dot org> - 0.59-2

    - Rebuild for selinux ppc32 issue.

    - Tue Jun 26 2007 Steven Pritchard <steve at kspei.com>       0.59-1

    - Update to 0.59.

    - Fri May 18 2007 Steven Pritchard <steve at kspei.com>       0.58-1

    - Update to 0.58.

    - Drop hack to change location of rgb.txt (fixed       upstream).

    - BR Image::Math::Constrain and Affix::Infix2Postfix for       better test coverage.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Thu Apr 24 2008 Steven Pritchard <steve at kspei.com>     0.64-2

    - Rebuild.

    - Thu Apr 24 2008 Steven Pritchard <steve at kspei.com>       0.64-1

    - Update to 0.64 (CVE-2008-1928).

    - Add versioned Test::More BR.

    - Thu Mar 6 2008 Tom 'spot' Callaway <tcallawa at       redhat.com> - 0.62-3

    - rebuild for new perl

    - Tue Feb 19 2008 Fedora Release Engineering <rel-eng at       fedoraproject.org> - 0.62-2

    - Autorebuild for GCC 4.3

    - Tue Dec 11 2007 Steven Pritchard <steve at kspei.com>       0.62-1

    - Update to 0.62.

    - Update License tag.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
32383	Fedora 9 : perl-Imager-0.64-2.fc9 (2008-4003)	Nessus	Fedora Local Security Checks	medium
32344	Fedora 7 : perl-Imager-0.64-2.fc7 (2008-3920)	Nessus	Fedora Local Security Checks	medium
32095	Fedora 8 : perl-Imager-0.64-2.fc8 (2008-3352)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-1928

high

Tenable Plugins

medium

medium

medium