Fedora Core 4 FEDORA-2006-104 Moderate: xpdf Buffer Overflow Threat

Xpdf is an X Window System based viewer for Portable Document Format

(PDF) files. Xpdf is a small and efficient program which uses

standard X fonts.

xpdf contains a heap based buffer overflow in the splash

rasterizer engine that can crash kpdf or even execute

arbitrary code.

Users impacted by these issues, should update to this new

package release.

- apply official patch to fix buffer overflow issue in the xpdf codebase

when handling splash images CVE-2006-0301 (#179047).

* Fri Jan 27 2006 Than Ngo 1:3.01-0.FC4.7

- apply patch to fix buffer overflow issue in the xpdf codebase

when handling splash images CVE-2006-0301 (#179047).

aea6ed92fb72a3f6674e77f6d973d6227a174385 SRPMS/xpdf-3.01-0.FC4.8.src.rpm

39f47f83421e36ff6b5ab0713ca792555eaac2d3 ppc/xpdf-3.01-0.FC4.8.ppc.rpm

9b557fbbd3a8ae434c2f0ad244fa1bcf7dabe6fa ppc/debug/xpdf-debuginfo-3.01-0.FC4.8.ppc.rpm

565e4e6eefaad8c740db501fbe87424c21cb32ea x86_64/xpdf-3.01-0.FC4.8.x86_64.rpm

91fd44a731cd12ff96e76b34381c047465af3983 x86_64/debug/xpdf-debuginfo-3.01-0.FC4.8.x86_64.rpm

4d4190ad7743c84acc0ad2070ae6ece97dab7232 i386/xpdf-3.01-0.FC4.8.i386.rpm

6e39fde98f929e680ee931cc5146a23d6e7e9c67 i386/debug/xpdf-debuginfo-3.01-0.FC4.8.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

fedora-announce-list mailing list

fedora-announce-list@redhat.com