[SECURITY] Fedora Core 3 Update: xpdf-3.01-0.FC3.4

Than Ngo than at redhat.com
Sat Dec 17 07:01:52 UTC 2005


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1170
2005-12-17
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : xpdf
Version     : 3.01                      
Release     : 0.FC3.4                  
Summary     : A PDF file viewer for the X Window System.
Description :
Xpdf is an X Window System based viewer for Portable Document Format
(PDF) files. Xpdf is a small and efficient program which uses
standard X fonts.

---------------------------------------------------------------------
Update Information:

Several flaws were discovered in Xpdf. An attacker could
construct a carefully crafted PDF file that could cause xpdf
to crash or possibly execute arbitrary code when opened. The
Common Vulnerabilities and Exposures project assigned the
name CAN-2005-3193 to these issues.

Users of xpdf should upgrade to this updated package, which
contains a patch to resolve these issues.
---------------------------------------------------------------------
* Wed Dec 14 2005 Than Ngo <than at redhat.com> 1:3.01-0.FC3.4
- better fix for CAN-2005-3193


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

3fbdcffe2a17515fca487c822e8ba898  SRPMS/xpdf-3.01-0.FC3.4.src.rpm
942fbe93c401ef2af4df6f78a0f171a8  x86_64/xpdf-3.01-0.FC3.4.x86_64.rpm
2fccaa6ad73c1ee153c5b0c80778f481  x86_64/debug/xpdf-debuginfo-3.01-0.FC3.4.x86_64.rpm
a4f2424c0983090281229e8709f011bd  i386/xpdf-3.01-0.FC3.4.i386.rpm
cf9f51b46f0a56818577d58a42f24856  i386/debug/xpdf-debuginfo-3.01-0.FC3.4.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------




More information about the announce mailing list