Fedora 9: 2009-2655 Moderate: Pdfjam Script Security Issues

PDFjam is a small collection of shell scripts which provide a simple

interface to some of the functionality of the excellent pdfpages

package (by Andreas Matthias) for pdfLaTeX. At present the utilities

available are:

* pdfnup, which allows PDF files to be "n-upped" in roughly the way

that psnup does for PostScript files;

* pdfjoin, which concatenates the pages of multiple PDF files

together into a single file;

* pdf90, which rotates the pages of one or more PDF files through 90

degrees (anti-clockwise).

In every case, source files are left unchanged.

A potential drawback of these utilities is that any hyperlinks in the

source PDF are lost. On the positive side, there is no appreciable

degradation of image quality in processing PDF files with these

programs, unlike some other indirect methods such as "pdf2ps | psnup |

ps2pdf" (in the author's experience).

PDFjam scripts previously create temporary files with predictable names, and are

also susceptible to the search path being modified. This update fixes the two

issues.

[ 1 ] Bug #480174 - pdfjam: multiple security issues (CVE-2008-5743, CVE-2008-5843)

https://bugzilla.redhat.com/show_bug.cgi?id=480174

su -c 'yum update pdfjam' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/