drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zahlenüberlauf in poppler
Name: |
Zahlenüberlauf in poppler |
|
ID: |
RHSA-2007:0732-01 |
|
Distribution: |
Red Hat |
|
Plattformen: |
Red Hat Enterprise Linux |
|
Datum: |
Mo, 30. Juli 2007, 21:47 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387 |
|
Applikationen: |
poppler |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- --------------------------------------------------------------------- Red Hat Security Advisory
Synopsis: Important: poppler security update Advisory ID: RHSA-2007:0732-01 Advisory URL: https://rhn.redhat.com/errata/RHSA-2007-0732.html Issue date: 2007-07-30 Updated on: 2007-07-30 Product: Red Hat Enterprise Linux CVE Names: CVE-2007-3387 - ---------------------------------------------------------------------
1. Summary:
Updated poppler packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
3. Problem description:
Poppler is a PDF rendering library, used by applications such as evince.
Maurycy Prodeus discovered an integer overflow flaw in the processing of PDF files. An attacker could create a malicious PDF file that would cause an application linked with poppler to crash or potentially execute arbitrary code when opened. (CVE-2007-3387)
All users of poppler should upgrade to these updated packages, which contain a backported patch to resolve this issue.
4. Solution:
Before applying this update, make sure that all previously-released errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
5. Bug IDs fixed (http://bugzilla.redhat.com/):
248194 - CVE-2007-3387 xpdf integer overflow
6. RPMs required:
Red Hat Enterprise Linux Desktop (v. 5 client):
SRPMS: poppler-0.5.4-4.1.el5.src.rpm 2748243d5dab417ee98c0ff3b56c48bc poppler-0.5.4-4.1.el5.src.rpm
i386: 0b1a924d41c486698fb0ef170e3bea98 poppler-0.5.4-4.1.el5.i386.rpm 74075e576f12700d58e0efc1acf9ee4f poppler-debuginfo-0.5.4-4.1.el5.i386.rpm 30690d55d19c44b300b6d4288b9b5e03 poppler-utils-0.5.4-4.1.el5.i386.rpm
x86_64: 0b1a924d41c486698fb0ef170e3bea98 poppler-0.5.4-4.1.el5.i386.rpm 06c6b81657b4dfa4c16547af8eb5d917 poppler-0.5.4-4.1.el5.x86_64.rpm 74075e576f12700d58e0efc1acf9ee4f poppler-debuginfo-0.5.4-4.1.el5.i386.rpm 28870bd89ae8634f40c82347378191fc poppler-debuginfo-0.5.4-4.1.el5.x86_64.rpm d5217710ebb25c47aad59758cf11bdfa poppler-utils-0.5.4-4.1.el5.x86_64.rpm
RHEL Desktop Workstation (v. 5 client):
SRPMS: poppler-0.5.4-4.1.el5.src.rpm 2748243d5dab417ee98c0ff3b56c48bc poppler-0.5.4-4.1.el5.src.rpm
i386: 74075e576f12700d58e0efc1acf9ee4f poppler-debuginfo-0.5.4-4.1.el5.i386.rpm 3a0a155e5d530f15b12d1508ab88cef0 poppler-devel-0.5.4-4.1.el5.i386.rpm
x86_64: 74075e576f12700d58e0efc1acf9ee4f poppler-debuginfo-0.5.4-4.1.el5.i386.rpm 28870bd89ae8634f40c82347378191fc poppler-debuginfo-0.5.4-4.1.el5.x86_64.rpm 3a0a155e5d530f15b12d1508ab88cef0 poppler-devel-0.5.4-4.1.el5.i386.rpm ddc147c33c2e9c581ee2c7bba3e44596 poppler-devel-0.5.4-4.1.el5.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
SRPMS: poppler-0.5.4-4.1.el5.src.rpm 2748243d5dab417ee98c0ff3b56c48bc poppler-0.5.4-4.1.el5.src.rpm
i386: 0b1a924d41c486698fb0ef170e3bea98 poppler-0.5.4-4.1.el5.i386.rpm 74075e576f12700d58e0efc1acf9ee4f poppler-debuginfo-0.5.4-4.1.el5.i386.rpm 3a0a155e5d530f15b12d1508ab88cef0 poppler-devel-0.5.4-4.1.el5.i386.rpm 30690d55d19c44b300b6d4288b9b5e03 poppler-utils-0.5.4-4.1.el5.i386.rpm
ia64: 1d4f3f5ce403009575c2223ac3e708c8 poppler-0.5.4-4.1.el5.ia64.rpm 32fd4de6a79bfb319a8c181fe91b2775 poppler-debuginfo-0.5.4-4.1.el5.ia64.rpm 37de0141d0a978228886827686dfb034 poppler-devel-0.5.4-4.1.el5.ia64.rpm 4045e010707c2519a23e41bf081e8e5d poppler-utils-0.5.4-4.1.el5.ia64.rpm
ppc: 6df67cdf707e8dcef58f2b66def0646e poppler-0.5.4-4.1.el5.ppc.rpm 676a4b1f1f25d2c5c0d72787ab2009e1 poppler-0.5.4-4.1.el5.ppc64.rpm 2cd14c9cebddc06476dff73c9b9fe35a poppler-debuginfo-0.5.4-4.1.el5.ppc.rpm feee81e8d354a9a8fb5c6c3754447f19 poppler-debuginfo-0.5.4-4.1.el5.ppc64.rpm 499d52521dfca164baedb43fc6856e83 poppler-devel-0.5.4-4.1.el5.ppc.rpm 7b128c68da3c46627c852f2e779423e2 poppler-devel-0.5.4-4.1.el5.ppc64.rpm a364ec9dff6e8c7d323d095a645b818c poppler-utils-0.5.4-4.1.el5.ppc.rpm
s390x: 8c8a8e7fce73cf301d6a29b59ec7ebea poppler-0.5.4-4.1.el5.s390.rpm 16c42b5003fc1421ee4cb85fb4b02326 poppler-0.5.4-4.1.el5.s390x.rpm 819258ccfb8f51469d39073c7d318884 poppler-debuginfo-0.5.4-4.1.el5.s390.rpm 7af0f5f23d03cdd5b3cfe2437ba2e685 poppler-debuginfo-0.5.4-4.1.el5.s390x.rpm 1bbce665e57d59247b5aa335d892fa5c poppler-devel-0.5.4-4.1.el5.s390.rpm ac5cbd1c7966ee9871a83859f77172fd poppler-devel-0.5.4-4.1.el5.s390x.rpm 8b54d4827349fcbd1deb375eab436a50 poppler-utils-0.5.4-4.1.el5.s390x.rpm
x86_64: 0b1a924d41c486698fb0ef170e3bea98 poppler-0.5.4-4.1.el5.i386.rpm 06c6b81657b4dfa4c16547af8eb5d917 poppler-0.5.4-4.1.el5.x86_64.rpm 74075e576f12700d58e0efc1acf9ee4f poppler-debuginfo-0.5.4-4.1.el5.i386.rpm 28870bd89ae8634f40c82347378191fc poppler-debuginfo-0.5.4-4.1.el5.x86_64.rpm 3a0a155e5d530f15b12d1508ab88cef0 poppler-devel-0.5.4-4.1.el5.i386.rpm ddc147c33c2e9c581ee2c7bba3e44596 poppler-devel-0.5.4-4.1.el5.x86_64.rpm d5217710ebb25c47aad59758cf11bdfa poppler-utils-0.5.4-4.1.el5.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387 http://www.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact details at https://www.redhat.com/security/team/contact/
Copyright 2007 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFGrjeZXlSAg2UNWIIRAvP1AJ0bt6l4OKGmY7Pg9JwhNgo5t5/xqgCfXq2u 3WSmpxfIjD5xcI/wy7iuf54= =iOQw -----END PGP SIGNATURE-----
-- Enterprise-watch-list mailing list Enterprise-watch-list@redhat.com https://www.redhat.com/mailman/listinfo/enterprise-watch-list
|
|
|
|