kdegraphics bug fix update

Advisory:	RHBA-2008:0075-5
Type:	Bug Fix Advisory
Severity:	N/A
Issued on:	2008-05-22
Last updated on:	2008-05-22
Affected Products:	RHEL Desktop Workstation (v. 5 client) RHEL Optional Productivity Applications (v. 5 server) Red Hat Enterprise Linux Desktop (v. 5 client)
OVAL:	N/A

Details

Updated kdegraphics packages that fix several bugs are now available.

The kdegraphics packages contain applications for the K Desktop
Environment, including the kfile-info plugin, JPEG EXIF Info and
kpdf, a PDF file viewer.

This update addresses the following issues:

* the JPEG kfile-info plugin, used by several KDE applications to show
image meta-data (for example, embedded EXIF information), could be sent
into an endless recursion by an EXIF parsing bug. This could cause the
process which launched the plugin to crash.

Users of kdegraphics are advised to upgrade to these updated packages,
which resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

RHEL Desktop Workstation (v. 5 client)

IA-32:
kdegraphics-devel-3.5.4-6.el5.i386.rpm	`fe15ba3dd01bd3fd5f8289de0336e93d`

x86_64:
kdegraphics-devel-3.5.4-6.el5.i386.rpm	`fe15ba3dd01bd3fd5f8289de0336e93d`
kdegraphics-devel-3.5.4-6.el5.x86_64.rpm	`343b6d390e8db8fae50f9ffb6ea29641`

RHEL Optional Productivity Applications (v. 5 server)

SRPMS:
kdegraphics-3.5.4-6.el5.src.rpm File outdated by: RHBA-2008:0810	`a7cc9d32a2b691581abbd160cef745b2`

IA-32:
kdegraphics-3.5.4-6.el5.i386.rpm File outdated by: RHBA-2008:0810	`ed2de9d31c5c62323b20f9bc1f071fc3`
kdegraphics-devel-3.5.4-6.el5.i386.rpm File outdated by: RHBA-2008:0810	`fe15ba3dd01bd3fd5f8289de0336e93d`

x86_64:
kdegraphics-3.5.4-6.el5.x86_64.rpm File outdated by: RHBA-2008:0810	`f222061384b65ab4262c36c43358b370`
kdegraphics-devel-3.5.4-6.el5.i386.rpm File outdated by: RHBA-2008:0810	`fe15ba3dd01bd3fd5f8289de0336e93d`
kdegraphics-devel-3.5.4-6.el5.x86_64.rpm File outdated by: RHBA-2008:0810	`343b6d390e8db8fae50f9ffb6ea29641`

Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
kdegraphics-3.5.4-6.el5.src.rpm File outdated by: RHBA-2008:0810	`a7cc9d32a2b691581abbd160cef745b2`

IA-32:
kdegraphics-3.5.4-6.el5.i386.rpm	`ed2de9d31c5c62323b20f9bc1f071fc3`

x86_64:
kdegraphics-3.5.4-6.el5.x86_64.rpm	`f222061384b65ab4262c36c43358b370`

(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

239473 - kdegraphics jpeg infinite recursion

References

http://www.redhat.com/security/updates/classification/#important

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/