-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-2116-1                  security@debian.org
http://www.debian.org/security/                       Moritz Muehlenhoff
October 12, 2010                      http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : poppler
Vulnerability  : several
Problem type   : local(remote)
Debian-specific: no
CVE Id(s)      : CVE-2010-3702 CVE-2010-3704
Debian Bug     : 599165

Joel Voss of Leviathan Security Group discovered two vulnerabilities in
the Poppler PDF rendering library, which may lead to the execution of
arbitrary code if a malformed PDF file is opened.

For the stable distribution (lenny), these problems have been fixed in
version 0.8.7-4.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your poppler packages.

Upgrade instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

      Size/MD5 checksum:  1469587 9af81429d6f8639c357a5eed25583365
      Size/MD5 checksum:    23876 219c5db15e7e0ad3ce01c45b5d2d17b5
      Size/MD5 checksum:     1481 a2d28a0e06fd0b226e9e87d88aab52e8

alpha architecture (DEC Alpha)

      Size/MD5 checksum:   891456 eecf847b41f68e67cfa250c239ab95ff
      Size/MD5 checksum:   220410 cdc18593a727b1a80279ad941a929dee
      Size/MD5 checksum:   329946 83a82f4a995727adac2a9cbb19cd0705
      Size/MD5 checksum:   303118 8407f059f1395ad93f765cdcf70f6246
      Size/MD5 checksum:   180578 f625e16840c1262de1e33579bfff3e00
      Size/MD5 checksum:   197172 2573621fc79b03251735690bfd818f5e
      Size/MD5 checksum:  1334994 5fbda5e9f2b3824d3d7ccbb1bcf000d0
      Size/MD5 checksum:  3204616 7c7c37da8b894e462b2758524365ca46
      Size/MD5 checksum:   234854 06e4977b32fb63577a918c110147e5f6
      Size/MD5 checksum:   452718 751233edf2ec85fd1e095893124f8909

amd64 architecture (AMD x86_64 (AMD64))

      Size/MD5 checksum:   184848 ed2abc9b1edd4cde56eb40b9b775cf45
      Size/MD5 checksum:  1119492 16725109ae348df90c30896be4a0c5de
      Size/MD5 checksum:   232702 2e7740b7098cd91493f178745b966d4a
      Size/MD5 checksum:   178414 497a3f7cbff9acdb0b01d58aae33415a
      Size/MD5 checksum:   358376 461a59da2c6b0c7531bba1a385f3607d
      Size/MD5 checksum:   275318 3c6b86fb8a57e9f17fbe058a36fa426e
      Size/MD5 checksum:   314086 3381ccceeaa1d2727f331d92b59818dd
      Size/MD5 checksum:  3148992 c1f76eb6ca390ef674647dc5def03c40
      Size/MD5 checksum:   840444 bc302d9fba4a4469b0d1902f5bb9777e
      Size/MD5 checksum:   217654 7008780b0aea027507fb70fe7c55af15

arm architecture (ARM)

      Size/MD5 checksum:   390130 993386a0e413c10df447dc83ccb3ca15
      Size/MD5 checksum:   184796 2e3eeb3b7a744a268dad95cae33d6146
      Size/MD5 checksum:  3115978 784d8f1cef1f6536b979e6c52baedbd0
      Size/MD5 checksum:   178194 8bc04420f3e45f0d9f0e2c70abe9f805
      Size/MD5 checksum:   226694 e9cad6f85ee41ad40d6cf5cd4accc5aa
      Size/MD5 checksum:   270650 d5bc5732bbe002e3db1425835848626f
      Size/MD5 checksum:   341936 e13e6c29d90f909c81e0b06bdf131a61
      Size/MD5 checksum:  1096786 1bbed300b089de228c0b9a5cc4d1a7f6
      Size/MD5 checksum:   807566 15887571376ee0d25fcf477ac4ba054f
      Size/MD5 checksum:   208332 ba2da71c5d576f32ee449c3753c1d88f

armel architecture (ARM EABI)

      Size/MD5 checksum:   376502 65ef8244fe39348d315e614cf7426b1d
      Size/MD5 checksum:  3159364 c3cbc56f216c48097d3eeb6c82c59152
      Size/MD5 checksum:   310866 499fdb8685258672067bd711d38d53c2
      Size/MD5 checksum:   207870 47c4c9a9f3ee4e91d72b3641cf877a3e
      Size/MD5 checksum:   222156 e8662e1b8c59263dbfa9da37821ee221
      Size/MD5 checksum:   275450 8c1a9b503faa4dfb842f77aac3b78660
      Size/MD5 checksum:   777258 23ed358ece8d5fa4bdedd7fd95d8da03
      Size/MD5 checksum:   181942 9fa3482ceaa47cffc8ef0334ff2d8fd3
      Size/MD5 checksum:  1108276 9440c768e0c36cd2679302707b3e67e3
      Size/MD5 checksum:   174352 e14eacb00011d03aacbd3800a62c3527

hppa architecture (HP PA RISC)

      Size/MD5 checksum:   180814 0fe3440213a0fdd89d1d3ab4abd52194
      Size/MD5 checksum:  1259958 121e935f943029dabfb8fb5708ca4d95
      Size/MD5 checksum:   929604 e2c0359a9bb9d2f43eba42cfb1176886
      Size/MD5 checksum:   388818 4728fa9ca382f2b80ccf7029bfdd4930
      Size/MD5 checksum:   291126 db34880c98215d5e21f41acdfe055793
      Size/MD5 checksum:   335522 67002c10addbdc4b2ff52af23a8548c1
      Size/MD5 checksum:  3140808 768379ef1d00c3eca85ff7a09e14daa4
      Size/MD5 checksum:   234318 1e912fea114bde04f1dba3769ea85a2b
      Size/MD5 checksum:   226170 d90e048a5bc7031a0b06ab78f371ba1f
      Size/MD5 checksum:   187028 a1421ae135c80c12687c716600af4eba

i386 architecture (Intel ia32)

      Size/MD5 checksum:   214852 2151fc1bf2edcd9024a2b7e3bc6d2812
      Size/MD5 checksum:   226704 7850919a3f4e701c055d84981eee435a
      Size/MD5 checksum:   344586 31464fea47dd982d178dded3b8a0369e
      Size/MD5 checksum:   312902 9a55130fc71c003c57838d039f253c9d
      Size/MD5 checksum:   182014 100ffcdbd3e41ebcfddce2c68347ee41
      Size/MD5 checksum:  3062702 fcf72afae54301e32b32241ffb38bfbe
      Size/MD5 checksum:  1054138 dc8a52af5230ac661194de09addea31e
      Size/MD5 checksum:   813932 f288903f2a99aae4e23f4335329024fb
      Size/MD5 checksum:   270452 7493a6c49962426bc37e2b475fc1a263
      Size/MD5 checksum:   177914 d19365a8780fc7a032a95c3eb0637540

ia64 architecture (Intel ia64)

      Size/MD5 checksum:  3107166 b8dcf25d1a0735feb8aae49c4b8d3ae8
      Size/MD5 checksum:   424464 60fc005362e166276b37fc0a438da37e
      Size/MD5 checksum:   195428 db5e21ac097827853ff2afd6ac573dcc
      Size/MD5 checksum:   353256 21471f96902a8592ab5d49cf3687ac64
      Size/MD5 checksum:  1421918 6593d5c5a9e019ff879c4651fda95548
      Size/MD5 checksum:   257344 bb5e9b6a70cfe567d2b98442db19cdef
      Size/MD5 checksum:   302456 107b6620f804f3990141043599d292c7
      Size/MD5 checksum:   233166 dd0b6f7bce2e07cba2c3a2019d7aada3
      Size/MD5 checksum:  1074000 49e343bd8bf61d3709341f1c725f929b
      Size/MD5 checksum:   184792 b8372aa7138ece28c62298a295211cbc

mips architecture (MIPS (Big Endian))

      Size/MD5 checksum:  3232772 e150761ce9b858d1f3adc8c4b732f330
      Size/MD5 checksum:   187832 b044fd59a07e9dcf6fadc769e4e39ab8
      Size/MD5 checksum:   390558 1107be43d549eb458d80081f8cb6c5af
      Size/MD5 checksum:   287574 10e5e71d729b6982b6ca10a4db3df19e
      Size/MD5 checksum:   177392 22b77e7afe8d572351860eceeae20a3a
      Size/MD5 checksum:   826186 c8a54dcce96f5098726f98e4a54b72f6
      Size/MD5 checksum:  1218220 dc0da0eec9ff021f7b37e268fcee258a
      Size/MD5 checksum:   302696 c30ddb1cd7560d32a8da06fe55b8c63c
      Size/MD5 checksum:   227884 be03fda3a4b1c7f656afe2c0e96590d8
      Size/MD5 checksum:   215390 416ee61ea77b5954ef9211d1ab813be7

mipsel architecture (MIPS (Little Endian))

      Size/MD5 checksum:   804632 5b7002bdd5caf184563bac6e69090e0c
      Size/MD5 checksum:  1200858 acfbc90bf29e9caeff4746b6c4f2d1e5
      Size/MD5 checksum:   187282 0dfd8e6f6ff32a5a1473cfcbf3d32fb3
      Size/MD5 checksum:   177102 b75ed90c14faaaeee0cc71d076d664d6
      Size/MD5 checksum:   288140 cc1bc2ca8a40c0a464ce2fae0911f97a
      Size/MD5 checksum:  3123908 c0cfc81a0b3e16e995f90bd7a2c58342
      Size/MD5 checksum:   231850 4c5b8a12a440b1386d8d23296a62fb56
      Size/MD5 checksum:   214246 bd35cb49e05b44cd75473267598bd4a6
      Size/MD5 checksum:   386846 b071de784b773f3ddad53e56b45d3e40
      Size/MD5 checksum:   300258 9856aa4a0f0072370ab44162da2d4d9a

powerpc architecture (PowerPC)

      Size/MD5 checksum:   360144 b8c7775745bb27aaa278578c3c99ecc9
      Size/MD5 checksum:  3225134 ec377f8e7c8b42298859d34e075ffb07
      Size/MD5 checksum:   222462 b7b82e4ad6a607bd1c9f8d18ccafc9b8
      Size/MD5 checksum:   184852 92ad48c1d0b4f71ee5d9dff90da846d2
      Size/MD5 checksum:  1182246 01f2fa2e9bbe1e890af3d522ea69ccd9
      Size/MD5 checksum:   246580 ac0fe37e13e4b13daed8da4231542929
      Size/MD5 checksum:   883168 76a6833fcf97d713bde4df8b32c45135
      Size/MD5 checksum:   318274 83f904fb9939631d361647d002493b48
      Size/MD5 checksum:   286030 87bd418c762f4852deb2f0ccf676e279
      Size/MD5 checksum:   181404 8a890e062a3e57cbf05298afe3e80f8a

s390 architecture (IBM S/390)

      Size/MD5 checksum:   841442 3af0ff00c65d798264f3fcae4d3d4a01
      Size/MD5 checksum:   218442 cff4034943d4bc73c6e25c44e818a03e
      Size/MD5 checksum:   279424 41af8fff9a31a67ff5348819767d38b2
      Size/MD5 checksum:   182698 d0826f59f5b3a670425eb3a4a545dd0d
      Size/MD5 checksum:   312902 a29c008538bca825e4adbd9d81c98966
      Size/MD5 checksum:   177752 431d82e8cd6c132da74ad093dbcc7ba0
      Size/MD5 checksum:  1122234 1ef35b74956ee14359f51462acb57106
      Size/MD5 checksum:   229764 6f1f3aa05049d00acad3e6b30e6e0648
      Size/MD5 checksum:   349904 03b490982f1212c160d336b936d91f87
      Size/MD5 checksum:  3247406 c2e3ace3b947c9db715bba922e920597

sparc architecture (Sun SPARC/UltraSPARC)

      Size/MD5 checksum:   311218 10ebf40bd6544ecfd1d5c14012bc2333
      Size/MD5 checksum:  3010294 25ed84792d1322113d88d7d86875a505
      Size/MD5 checksum:   823558 b249aa0aca98b8194d82dc5099cd4660
      Size/MD5 checksum:   177016 6ca62885f918c19fb6dd3853e4d9f47d
      Size/MD5 checksum:   274862 d9959778df605e6242c8a869fe0933c1
      Size/MD5 checksum:  1077730 33624d329997fad4abfec6228e7bcaa4
      Size/MD5 checksum:   182754 6392ee52ee09d7140f33d93dca41ea09
      Size/MD5 checksum:   349128 4fdac4cf89006eef1554f41fa34258d2
      Size/MD5 checksum:   227040 16627c2e2b817e6279f2ed429394cf81
      Size/MD5 checksum:   214664 50e728e424d503059a2aa6c8575a06eb


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp:  dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/