[SECURITY] Fedora Core 3 Update: gpdf-2.8.2-6.2

Raymond Strode rstrode at redhat.com
Thu Dec 15 01:57:41 UTC 2005


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1146
2005-12-14
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : gpdf
Version     : 2.8.2                      
Release     : 6.2                  
Summary     : viewer for Portable Document Format (PDF) files for GNOME
Description :
This is GPdf, a viewer for Portable Document Format (PDF) files for
GNOME. GPdf is based on the Xpdf program and uses additional GNOME
libraries for better desktop integration.

GPdf includes the gpdf application, a Bonobo control for PDF display
which can be embedded in Nautilus, and a Nautilus property page for
PDF files.

---------------------------------------------------------------------
Update Information:

Several more flaws were discovered in Xpdf, which is used
internally by gpdf. An attacker could
construct a carefully crafted PDF file that could cause gpdf
to crash or possibly execute arbitrary code when opened. The
Common Vulnerabilities and Exposures project assigned the
name CAN-2005-3193 to these issues.

Users of gpdf should upgrade to this updated package, which
contains a patch to resolve these issues.
---------------------------------------------------------------------

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

0d559eb6690bbf9a83295b610b79e858  SRPMS/gpdf-2.8.2-6.2.src.rpm
eac2349c3f5468091db4e3f16d26a5ad  x86_64/gpdf-2.8.2-6.2.x86_64.rpm
cf132355c60bca655fc30d1cf3ad49da  x86_64/debug/gpdf-debuginfo-2.8.2-6.2.x86_64.rpm
e25a54925b6a6f853b891d3920d5d5c6  i386/gpdf-2.8.2-6.2.i386.rpm
e0211d3471d8fbd130e146acc04051b5  i386/debug/gpdf-debuginfo-2.8.2-6.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------




More information about the announce mailing list