Skip to content
OpenAdvisories
Unscored RHSA-2006:0648 10 CVEs

Red Hat Security Advisory: kdegraphics security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as kdegraphics 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::as kdegraphics-debuginfo 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::as kdegraphics-devel 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::desktop kdegraphics 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::desktop kdegraphics-debuginfo 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::desktop kdegraphics-devel 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::es kdegraphics 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::es kdegraphics-debuginfo 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::es kdegraphics-devel 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::ws kdegraphics 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::ws kdegraphics-debuginfo 7:3.1.3-3.10
Red Hat · RHEL 3 enterprise_linux:3::ws kdegraphics-devel 7:3.1.3-3.10

Vulnerabilities 10

  • Unscored —
    CVE-2006-2024 Public exploit

    Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a T…

  • Unscored —
    CVE-2006-2025 Public exploit EPSS 11%

    Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attac…

  • Unscored —
    CVE-2006-2026 Public exploit EPSS 10%

    Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of…

  • Unscored —
    CVE-2006-3459 Public exploit EPSS 56%

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and oth…

  • Unscored —

    Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent atta…

  • Unscored —

    Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-depen…

  • Unscored —

    Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-depen…

  • Unscored —

    The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating…

  • Unscored —

    TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execut…

  • Unscored —

    Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=201313
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0648.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-2024
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2024
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2024
  • report
    https://access.redhat.com/security/cve/CVE-2006-2025
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618084
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2025
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2025
  • report
    https://access.redhat.com/security/cve/CVE-2006-2026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2026
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2026
  • report
    https://access.redhat.com/security/cve/CVE-2006-3459
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=199111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3459
  • report
    https://access.redhat.com/security/cve/CVE-2006-3460
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3460
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3460
  • report
    https://access.redhat.com/security/cve/CVE-2006-3461
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3461
  • report
    https://access.redhat.com/security/cve/CVE-2006-3462
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3462
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3462
  • report
    https://access.redhat.com/security/cve/CVE-2006-3463
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3463
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3463
  • report
    https://access.redhat.com/security/cve/CVE-2006-3464
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3464
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3464
  • report
    https://access.redhat.com/security/cve/CVE-2006-3465
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3465
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3465