Fedora Core 4: 2005-027 Critical: xpdf Code Execution Issue Resolved

Xpdf is an X Window System based viewer for Portable Document Format

(PDF) files. Xpdf is a small and efficient program which uses

standard X fonts.

Several flaws were discovered in Xpdf. An attacker could

construct a carefully crafted PDF file that could cause xpdf

to crash or possibly execute arbitrary code when opened. The

Common Vulnerabilities and Exposures project assigned the

name CAN-2005-3193 to these issues.

Users of xpdf should upgrade to this updated package, which

contains a patch to resolve these issues.

- fix CAN-2005-3193

abcb9d558d81aeb50a79250f522ca1a2de84552d SRPMS/xpdf-3.01-0.FC4.6.src.rpm

e9ae07e2016909f1eb62086122e6bfa8fe50f556 ppc/xpdf-3.01-0.FC4.6.ppc.rpm

b01ff97230638824488cc394d48cfb91eb7133e9 ppc/debug/xpdf-debuginfo-3.01-0.FC4.6.ppc.rpm

db46595730362036160d6e3779a44fc505484000 x86_64/xpdf-3.01-0.FC4.6.x86_64.rpm

1e94f6bf5c73d66bba7bf7997b465f7fa443da80 x86_64/debug/xpdf-debuginfo-3.01-0.FC4.6.x86_64.rpm

2a6e19b6b68188c12c7e15366a748536d575f828 i386/xpdf-3.01-0.FC4.6.i386.rpm

122f060d60aee3e313ddede8a98cf09da51f1b25 i386/debug/xpdf-debuginfo-3.01-0.FC4.6.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list mailing list

fedora-announce-list@redhat.com