Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora Core 2 gpdf Critical Integer Overflow Issue CAN-2004-0888

fedora
Calendar Grey October 28, 2004
Scroller Fedora
Addresses integer overflow vulnerabilities in gpdf version 2.8.0 and mitigates the CAN-2004-0888 security concern for users operating on Fedora Core 2.
Update to gpdf 2.8.0, which fixes the CAN-2004-0888 security issue.

Summary

This is GPdf, a viewer for Portable Document Format (PDF) files for

GNOME. GPdf is based on the Xpdf program and uses additional GNOME

libraries for better desktop integration.

GPdf includes the gpdf application, a Bonobo control for PDF display

which can be embedded in Nautilus, and a Nautilus property page for

PDF files.

Update Information:

Update to gpdf 2.8.0, which fixes the CAN-2004-0888 security issue. Also fixes: #rh127803# crash with mailto: links #rh132469# crash with remote documents using gnome-vfs * Thu Oct 28 2004 Dan Williams <dcbw@redhat.com> 2.8.0-4.1.fc2

- Fix CAN-2004-0888 (xpdf integer overflows)

* Fri Oct 15 2004 Marco Pesenti Gritti <mpg@redhat.com> 2.8.0-4

- rebuilt

* Tue Oct 12 2004 Marco Pesenti Gritti <mpg@redhat.com> 2.8.0-2

- rebuilt

* Wed Sep 22 2004 Dan Williams <dcbw@redaht.com> 2.8.0-1

- Update to 2.8.0 - Fix Gnome #153153/Red Hat #132469, patch works around a gnome-vfs issue by issuing an error, rather than crashing

* Tue Aug 31 2004 Alex Larsson <alexl@redhat.com> 2.7.91-1

- update to 2.7.92 - removed gpdf-2.7.90-uri-fix.patch, as that was in upstream

* Wed Aug 18 2004 Dan Williams <dcbw@redhat.com> 2.7.90-2

- Fix crashes on mailto: links (RH #127803)

* Wed Aug 18 2004 Dan Williams <dcbw@redhat.com> 2.7.90-1

- Update to 2.7.90

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory fedora critical DoS integer overflow gpdf

Change Log

References

Fedora Update Notification FEDORA-2004-358 2004-10-28
Product : Fedora Core 2 Name : gpdf Version : 2.8.0 Release : 4.1.fc2 Summary : viewer for Portable Document Format (PDF) files for GNOME Description : This is GPdf, a viewer for Portable Document Format (PDF) files for GNOME. GPdf is based on the Xpdf program and uses additional GNOME libraries for better desktop integration.
GPdf includes the gpdf application, a Bonobo control for PDF display which can be embedded in Nautilus, and a Nautilus property page for PDF files.

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora Core 2
Name: gpdf
Version: 2.8.0
Release: 4.1.fc2
Summary: viewer for Portable Document Format (PDF) files for GNOME

Topics%20covered

Topics Covered

security advisory fedora critical DoS integer overflow gpdf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.