[SECURITY] Fedora Core 4 Update: xpdf-3.01-0.FC4.3

Than Ngo than at redhat.com
Tue Dec 6 16:43:30 UTC 2005


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1122
2005-12-06
---------------------------------------------------------------------

Product     : Fedora Core 4
Name        : xpdf
Version     : 3.01                      
Release     : 0.FC4.3                  
Summary     : A PDF file viewer for the X Window System.
Description :
Xpdf is an X Window System based viewer for Portable Document Format
(PDF) files. Xpdf is a small and efficient program which uses
standard X fonts.

---------------------------------------------------------------------
Update Information:

Several flaws were discovered in Xpdf. An attacker could
construct a carefully crafted PDF file that could cause Xpdf
to crash or possibly execute arbitrary code when opened. The
Common Vulnerabilities and Exposures project assigned the
name CAN-2005-3193 to these issues.

Users of Xpdf should upgrade to this updated package, which
contains a patch to resolve these issues.
---------------------------------------------------------------------
* Mon Nov  7 2005 Than Ngo <than at redhat.com> 1:3.01-0.FC4.3
- apply upstream patch to fix security holes in Xpdf


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

e439b80c57a6ca7d5e2b38f8ae7d276c  SRPMS/xpdf-3.01-0.FC4.3.src.rpm
0ee28635d60f65d2d8acc9ae0fe5d7b2  ppc/xpdf-3.01-0.FC4.3.ppc.rpm
729d05aa72aa61af710115ea94fc6954  ppc/debug/xpdf-debuginfo-3.01-0.FC4.3.ppc.rpm
2a191c74800dd66255ac18857c12ac5d  x86_64/xpdf-3.01-0.FC4.3.x86_64.rpm
ee1cd4cccec3a0b3bb72de3a72f4ce9a  x86_64/debug/xpdf-debuginfo-3.01-0.FC4.3.x86_64.rpm
c7c92841cec26466b576208d14feed9e  i386/xpdf-3.01-0.FC4.3.i386.rpm
9ec2d56a438aaa69029a440803f7b802  i386/debug/xpdf-debuginfo-3.01-0.FC4.3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------




More information about the fedora-announce-list mailing list