Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
87

Debian 3.1 DSA 983-1 Critical: pdftohtml Update for Local and Remote Issues

Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 983-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze February 28th, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : pdftohtml Vulnerability : several Problem type : local (remote) Debian-specific: no Derek Noonburg has fixed several potential vulnerabilities in xpdf, which are also present in pdftohtml, a utility that translates PDF documents into HTML format. The old stable distribution (woody) does not contain pdftohtml packages. For the stable distribution (sarge) these problems have been fixed in version 0.36-11sarge2. For the unstable distribution (sid) these problems have been fixed in version 0.36-12. We recommend that you upgrade your gpdf package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 602 8dc87f9f04bf4e95d628a81540b5320e Size/MD5 checksum: 11953 aa4fe47eeec4ff81df92aab8f218f1f1 Size/MD5 checksum: 300922 75ad095bb51e1f66c9f7691e6af12f44 Alpha architecture: Size/MD5 checksum: 314142 b5bd8a0387aaaa69a31b74bc9baf7498 AMD64 architecture: Size/MD5 checksum: 259728 a16f018455f8e3409399f9123af3c17a ARM architecture: Size/MD5 checksum: 266500bbf302ca14ddad34769b0b8a5822d139 Intel IA-32 architecture: Size/MD5 checksum: 253988 fd6e84484e62b90ff4eb419bdff63044 Intel IA-64 architecture: Size/MD5 checksum: 374206 900ea16bffd41ff59272bab4e89077a9 HP Precision architecture: Size/MD5 checksum: 330356 4bf2182b3dc9f1269efb039c07fceea3 Motorola 680x0 architecture: Size/MD5 checksum: 234812 34eb54fb6c07676aee15a9cc15110c28 Big endian MIPS architecture: Size/MD5 checksum: 311482 2540b6b4c0b523087a40fb4ef7b57c46 Little endian MIPS architecture: Size/MD5 checksum: 307188 16034038f8c3c206623702c4b3695b69 PowerPC architecture: Size/MD5 checksum: 269634 4053b1c0d6c76ca5c94ee97df412b5e5 IBM S/390 architecture: Size/MD5 checksum: 242482 ff9f29460ad1cb56b4c92dfd3e1e2d57 Sun Sparc architecture: Size/MD5 checksum: 245378 d1ecf4c546240dab174947827b01766e These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance pdftohtml software to address various local and remote vulnerabilities on Debian platforms in accordance with DSA 983-1 guidelines.. Debian Packages, pdftohtml Fix, Security Update, Remote Issue, Software Upgrade. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 28, 2006 Critical Debian
87

Debian 3.1 DSA 962-1 Critical: Pdtohtml Remote Code Execution

Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 962-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : pdftohtml Vulnerability : buffer overflows Problem type : remote Debian-specific: no CVE IDs : CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628 "infamous41md" and Chris Evans discovered several heap based buffer overflows in xpdf which are also present in pdftohtml, a utility that translates PDF documents into HTML format, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. The old stable distribution (woody) does not contain pdftohtml packages. For the stable distribution (sarge) these problems have been fixed in version 0.36-11sarge1. For the unstable distribution (sid) these problems will be fixed soon. We recommend that you upgrade your pdftohtml package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 602 c7095f7045d69bcebca90ade3f62a9a4 Size/MD5 checksum: 11388 17672ff97722b502d4d5b3ab804401e3 Size/MD5 checksum: 30092275ad095bb51e1f66c9f7691e6af12f44 Alpha architecture: Size/MD5 checksum: 313926 ec897e4a81702159e516e823317e8652 AMD64 architecture: Size/MD5 checksum: 259576 de188540a99fb893584e2c9a2f1c0e41 ARM architecture: Size/MD5 checksum: 266372 93821a971df9623124f68216c541f307 Intel IA-32 architecture: Size/MD5 checksum: 253790 45b7b46b375e72507ebdf83b609b9bd3 Intel IA-64 architecture: Size/MD5 checksum: 374010 a64d9a344341b8ff8f88ceba02a2481e HP Precision architecture: Size/MD5 checksum: 330128 4ccc9307617411979efbca1d594f463b Motorola 680x0 architecture: Size/MD5 checksum: 234598 e14153061b6f573e619f9dbd76bfbda8 Big endian MIPS architecture: Size/MD5 checksum: 311310 067a76c99fd6f144f7c75613b37493c7 Little endian MIPS architecture: Size/MD5 checksum: 307086 9890b5cec47e5e8e8ae4a9442c326253 PowerPC architecture: Size/MD5 checksum: 269364 9f345aa5ef3480b3d4591eeb4071bfa7 IBM S/390 architecture: Size/MD5 checksum: 242284 4eb6779646c115bfe6ca7e7baaaaaec8 Sun Sparc architecture: Size/MD5 checksum: 245330 7dbf6432f1cc0a2e6d9b42ffa80b588f These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu patch for pdftohtml resolves major security flaws and potential memory overflow issues. Update advised.. Debian Security Advisory,pdftohtml fix,code execution risk. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 01, 2006 Critical Debian
91

Gentoo: GLSA 200502-10 Moderate: Pdftohtml Code Execution Risk

pdftohtml includes vulnerable Xpdf code to handle PDF files, making it vulnerable to execution of arbitrary code upon converting a malicious PDF file. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200502-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: pdftohtml: Vulnerabilities in included Xpdf Date: February 09, 2005 Bugs: #78629 ID: 200502-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= pdftohtml includes vulnerable Xpdf code to handle PDF files, making it vulnerable to execution of arbitrary code upon converting a malicious PDF file. Background ========= pdftohtml is a utility to convert PDF files to HTML or XML formats. It makes use of Xpdf code to decode PDF files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/pdftohtml < 0.36-r3 > = 0.36-r3 Description ========== Xpdf is vulnerable to a buffer overflow, as described in GLSA 200501-28. Impact ===== An attacker could entice a user to convert a specially-crafted PDF file, potentially resulting in the execution of arbitrary code with the rights of the user running pdftohtml. Workaround ========= There is no known workaround at this time. Resolution ========= All pdftohtml users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-text/pdftohtml-0.36-r3" References ========= [ 1 ] GLSA 200501-28 https://security.gentoo.org/glsa/200501-28 [ 2 ] CAN-2005-0064 https://www.cve.org/CVERecord?id=CAN-2005-0064 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200502-10 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2005 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.0/ . Gentoo Linux Advisory GLSA 202112-12 highlights vulnerabilities in pdftohtml that could allow unauthorized code execution.. pdftohtml vulnerabilities,file conversion security,buffer overflow risk. . LinuxSecurity.com Team

Calendar 2 Feb 09, 2005 Gentoo
91

Gentoo: 202303-18 Alert: pdf2html Code Compromise via Threatening PDFs

pdftohtml includes vulnerable Xpdf code to handle PDF files, making it vulnerable to execution of arbitrary code upon converting a malicious PDF file. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200501-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: pdftohtml: Vulnerabilities in included Xpdf Date: January 10, 2005 Bugs: #75200 ID: 200501-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= pdftohtml includes vulnerable Xpdf code to handle PDF files, making it vulnerable to execution of arbitrary code upon converting a malicious PDF file. Background ========= pdftohtml is a utility to convert PDF files to HTML or XML formats. It makes use of Xpdf code to decode PDF files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/pdftohtml < 0.36-r2 > = 0.36-r2 Description ========== Xpdf is vulnerable to integer overflows, as described in GLSA 200412-24. Impact ===== An attacker could entice a user to convert a specially-crafted PDF file, potentially resulting in the execution of arbitrary code with the rights of the user running pdftohtml. Workaround ========= There is no known workaround at this time. Resolution ========= All pdftohtml users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-text/pdftohtml-0.36-r2" References ========= [ 1 ] GLSA 200412-24 https://security.gentoo.org/glsa/200410-20 [ 2 ] CAN-2004-1125 https://www.cve.org/CVERecord?id=CVE-CAN-2004-1125 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200501-13 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2005 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.0/ . Gentoo Linux Advisory GLSA 202303-45 outlines security flaws found in pstoedit's processing of malformed PostScript files.. Gentoo Linux,pdftohtml,Xpdf,code execution,security advisory. . LinuxSecurity.com Team

Calendar 2 Jan 10, 2005 Gentoo
91

Gentoo: GLSA-200411-30 Normal: pdftohtml Code Execution Risk

pdftohtml includes vulnerable Xpdf code to handle PDF files, making it vulnerable to execution of arbitrary code upon converting a malicious PDF file. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200411-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: pdftohtml: Vulnerabilities in included Xpdf Date: November 23, 2004 Bugs: #69019 ID: 200411-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= pdftohtml includes vulnerable Xpdf code to handle PDF files, making it vulnerable to execution of arbitrary code upon converting a malicious PDF file. Background ========= pdftohtml is a utility to convert PDF files to HTML or XML formats. It makes use of Xpdf code to decode PDF files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/pdftohtml = 0.36-r1 Description ========== Xpdf is vulnerable to multiple integer overflows, as described in GLSA 200410-20. Impact ===== An attacker could entice a user to convert a specially-crafted PDF file, potentially resulting in execution of arbitrary code with the rights of the user running pdftohtml. Workaround ========= There is no known workaround at this time. Resolution ========= All pdftohtml users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-text/pdftohtml-0.36-r1" References ========= [ 1 ] GLSA 200410-20 https://security.gentoo.org/glsa/200410-20 [ 2 ] CAN-2004-0888 https://www.cve.org/CVERecord?id=CAN-2004-0888 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200411-30 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2004 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.0/ . To boost Gentoo Linux security, update pdftohtml for vulnerability fixes that may permit malicious PDF code execution. Sync repositories and upgrade pdftohtml for security. pdftohtml, code execution, gentoo, xpdf, advisory. . LinuxSecurity.com Team

Calendar 2 Nov 23, 2004 Gentoo
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here