Slackware: 2006-045-10 Important: libpng Out-Of-Bounds Read Vulnerability
slackware
February 15, 2006
New xpdf packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues
Summary
Here are the details from the Slackware 10.2 ChangeLog: patches/packages/xpdf-3.01-i486-3.tgz: Recompiled with xpdf-3.01pl2.patch to fix integer and heap overflows in xpdf triggered by malformed PDF files. For more information, see: https://www.cve.org/CVERecord?id=CVE-2005-3191 https://www.cve.org/CVERecord?id=CVE-2005-3192 https://www.cve.org/CVERecord?id=CVE-2005-3193 https://www.cve.org/CVERecord?id=CVE-2005-3624 https://www.cve.org/CVERecord?id=CVE-2005-3625 https://www.cve.org/CVERecord?id=CVE-2005-3626 https://www.cve.org/CVERecord?id=CVE-2005-3627 https://www.cve.org/CVERecord?id=CVE-2005-3628 https://www.cve.org/CVERecord?id=CVE-2006-0301 (* Security fix *)
Topics Covered
Where Find New Packages
Updated package for Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/xpdf-3.01-i386-3.tgz
Updated package for Slackware 9.1:
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware -current:
MD5 Signatures
Slackware 9.0 package:
febda74afb06e94f745ef2d02867b505 xpdf-3.01-i386-3.tgz
Slackware 9.1 package:
1dd5847ecf094359fe712850391e7b37 xpdf-3.01-i486-3.tgz
Slackware 10.0 package:
abd65f71b8484579aa4b1ce081b4d61e xpdf-3.01-i486-3.tgz
Slackware 10.1 package:
9270fb578380221d9e642c7d80fac931 xpdf-3.01-i486-3a.tgz
Slackware 10.2 package:
8c85579182d43d56920e5a79063b447e xpdf-3.01-i486-3.tgz
Slackware -current package:
172d66fd19dbf8ceca0a25a6c17e75c2 xpdf-3.01-i486-3.tgz
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg xpdf-3.01-i486-3.tgz
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!