Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 25: FEDORA-2017-a05e2b8545 Critical Threat in QPDF

fedora
Calendar Grey August 18, 2017
Dist Fedora Esm H88
Updates for qpdf in Fedora 25 tackle severe security vulnerabilities that necessitate a rebuild of cups filters. Execute an upgrade using dnf immediately.
Patches solving CVEs in qpdf changes API, so cups-filters needed to be rebuilt with it

Summary

QPDF is a command-line program that does structural, content-preserving

transformations on PDF files. It could have been called something

like pdf-to-pdf. It includes support for merging and splitting PDFs

and to manipulate the list of pages in a PDF file. It is not a PDF viewer

or a program capable of converting PDF into other formats.

Patches solving CVEs in qpdf changes API, so cups-filters needed to be rebuilt

with it. ---- Reverting changes from previous update

[ 1 ] Bug #1454820 - CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 qpdf: various flaws [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1454820

su -c 'dnf upgrade qpdf' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 25
Version: 6.0.0
Release: 6.fc25
Summary: Command-line tools and library for transforming PDF files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here