Login
Newsletter
Werbung

Sicherheit: Zahlenüberläufe in xpdf
Aktuelle Meldungen Distributionen
Name: Zahlenüberläufe in xpdf
ID: MDKSA-2005:043
Distribution: Mandrake
Plattformen: Mandrake Corporate Server 2.1, Mandrake 10.0, Mandrake 10.1, Mandrake Corporate Server 3.0
Datum: Fr, 18. Februar 2005, 12:00
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0206
Applikationen: xpdf

Originalnachricht

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: xpdf
Advisory ID: MDKSA-2005:043
Date: February 17th, 2005

Affected versions: 10.0, 10.1, Corporate 3.0,
Corporate Server 2.1
______________________________________________________________________

Problem Description:

Previous updates to correct integer overflow issues affecting xpdf
overlooked certain conditions when built for a 64 bit platform.
(formerly CAN-2004-0888). This also affects applications that use
embedded versions of xpdf.

The updated packages are patched to deal with these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0206
______________________________________________________________________

Updated Packages:

Mandrakelinux 10.0/AMD64:
6dfa3bb16bc3505df4a3611578dbd6dc
amd64/10.0/RPMS/xpdf-3.00-5.5.100mdk.amd64.rpm
37c95383532c1e8d1e189cd1aa18f356
amd64/10.0/SRPMS/xpdf-3.00-5.5.100mdk.src.rpm

Mandrakelinux 10.1/X86_64:
79d6c0f92cf1e00da8d62adfd0968009
x86_64/10.1/RPMS/xpdf-3.00-7.4.101mdk.x86_64.rpm
65a16347a285c376355f4dc4b7fcdc2f
x86_64/10.1/SRPMS/xpdf-3.00-7.4.101mdk.src.rpm

Corporate Server 2.1/X86_64:
22405ca391960b74c2dad5cbe372f9cd
x86_64/corporate/2.1/RPMS/xpdf-1.01-4.9.C21mdk.x86_64.rpm
00044a02e6689ecdd8af09ed7ec3f1c5
x86_64/corporate/2.1/SRPMS/xpdf-1.01-4.9.C21mdk.src.rpm

Corporate 3.0/X86_64:
eb4a5ff36fb13a17cd2508d9c3cbfb3d
x86_64/corporate/3.0/RPMS/xpdf-3.00-5.5.C30mdk.x86_64.rpm
7be80ea54ba1dc2278557d3475b0a0f4
x86_64/corporate/3.0/SRPMS/xpdf-3.00-5.5.C30mdk.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandrakesoft for security. You can obtain
the GPG public key of the Mandrakelinux Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandrakelinux at:

http://www.mandrakesoft.com/security/advisories

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
<security linux-mandrake.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFCFVmSmqjQ0CJFipgRAplaAJ9wY5ij3JnBatDV7VZI8miOJQlI1ACfepWZ
xS6rG+6GsfMrqHfl6gQNSas=
=2pCf
-----END PGP SIGNATURE-----


____________________________________________________
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung