Fedora Legacy Test Update Notification: gpdf

[Marc Deslauriers]

---------------------------------------------------------------------
Fedora Legacy Test Update Notification
FEDORALEGACY-2004-2195
Bugzilla https://bugzilla.fedora.us/show_bug.cgi?id=2195
2004-12-01
---------------------------------------------------------------------

Name        : gpdf
Versions    : fc1: gpdf-0.110-1.2.legacy
Summary     : viewer for Portable Document Format (PDF) files for GNOME
Description : 
This is GPdf, a viewer for Portable Document Format (PDF) files for
GNOME. GPdf is based on the Xpdf program and uses additional GNOME
libraries for better desktop integration.

---------------------------------------------------------------------
Update Information:

An updated gpdf package that fixes a number of integer overflow security
flaws is now available.

GPdf is a viewer for Portable Document Format (PDF) files for GNOME.

During a source code audit, Chris Evans and others discovered a number
of integer overflow bugs that affected all versions of xpdf. These
issues also affect gpdf as it is based on xpdf source code. An attacker
could construct a carefully crafted PDF file that could cause gpdf to
crash or possibly execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CAN-2004-0888 to this issue.

Users of gpdf are advised to upgrade to this errata package, which
contains a backported patch correcting these issues.

---------------------------------------------------------------------
Changelogs

fc1:
* Tue Nov 30 2004 Marc Deslauriers <marcdeslauriers at videotron.ca>
0.110-1.2.legacy
- Added missing gettext BuildRequires

* Thu Oct 28 2004 Rob Myers <rob.myers at gtri.gatech.edu> 0.110-1.1.legacy
- patch for CAN-2004-0888 CAN-2004-0889 (FL #2186, #2195)

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedoralegacy.org/
(sha1sums)

fc1:
5f64cfd5be571ffcb49f1cf067603165decc2318
fedora/1/updates-testing/i386/gpdf-0.110-1.2.legacy.i386.rpm
7795c1af751bb28a443d60508436b539b34f0d81
fedora/1/updates-testing/SRPMS/gpdf-0.110-1.2.legacy.src.rpm

---------------------------------------------------------------------

Please test and comment in bugzilla.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20041201/399b0ee6/attachment.sig>