[SECURITY] Fedora Core 4 Update: xpdf-3.01-0.FC4.6

Karsten Hopp karsten at redhat.com
Wed Jan 11 16:04:05 UTC 2006


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-027
2006-01-11
---------------------------------------------------------------------

Product     : Fedora Core 4
Name        : xpdf
Version     : 3.01                      
Release     : 0.FC4.6                  
Summary     : A PDF file viewer for the X Window System.
Description :
Xpdf is an X Window System based viewer for Portable Document Format
(PDF) files. Xpdf is a small and efficient program which uses
standard X fonts.

---------------------------------------------------------------------
Update Information:

Several flaws were discovered in Xpdf. An attacker could
construct a carefully crafted PDF file that could cause xpdf
to crash or possibly execute arbitrary code when opened. The
Common Vulnerabilities and Exposures project assigned the
name CAN-2005-3193 to these issues. 

Users of xpdf should upgrade to this updated package, which
contains a patch to resolve these issues.
---------------------------------------------------------------------
* Tue Jan 10 2006 Karsten Hopp <karsten at redhat.de> 3.01-0.FC4.6
- fix CAN-2005-3193

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

abcb9d558d81aeb50a79250f522ca1a2de84552d  SRPMS/xpdf-3.01-0.FC4.6.src.rpm
e9ae07e2016909f1eb62086122e6bfa8fe50f556  ppc/xpdf-3.01-0.FC4.6.ppc.rpm
b01ff97230638824488cc394d48cfb91eb7133e9  ppc/debug/xpdf-debuginfo-3.01-0.FC4.6.ppc.rpm
db46595730362036160d6e3779a44fc505484000  x86_64/xpdf-3.01-0.FC4.6.x86_64.rpm
1e94f6bf5c73d66bba7bf7997b465f7fa443da80  x86_64/debug/xpdf-debuginfo-3.01-0.FC4.6.x86_64.rpm
2a6e19b6b68188c12c7e15366a748536d575f828  i386/xpdf-3.01-0.FC4.6.i386.rpm
122f060d60aee3e313ddede8a98cf09da51f1b25  i386/debug/xpdf-debuginfo-3.01-0.FC4.6.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------




More information about the announce mailing list