Skip to navigation

Security Advisory xpdf security update

Advisory: RHSA-2005:840-10
Type: Security Advisory
Severity: Important
Issued on: 2005-12-06
Last updated on: 2005-12-20
Affected Products: Red Hat Desktop (v. 3)
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 2.1)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Enterprise Linux WS (v. 4)
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor
CVEs (cve.mitre.org): CVE-2005-3191
CVE-2005-3192
CVE-2005-3193
CVE-2005-3624
CVE-2005-3625
CVE-2005-3626
CVE-2005-3627
CVE-2005-3628

Details

An updated xpdf package that fixes several security issues is now available.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

[Updated 20 Dec 2005]
The initial fix for these issues was incomplete. The packages have been
updated with a more complete fix.

The xpdf package is an X Window System-based viewer for Portable Document
Format (PDF) files.

Several flaws were discovered in Xpdf. An attacker could construct a
carefully crafted PDF file that could cause Xpdf to crash or possibly
execute arbitrary code when opened. The Common Vulnerabilities and
Exposures project assigned the names CVE-2005-3191, CVE-2005-3192, and
CVE-2005-3193 to these issues.

Users of Xpdf should upgrade to this updated package, which contains a
backported patch to resolve these issues.

Red Hat would like to thank Derek B. Noonburg for reporting this issue and
providing a patch.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Updated packages

Red Hat Desktop (v. 3)

SRPMS:
xpdf-2.02-9.8.src.rpm
File outdated by:  RHSA-2010:0750
    MD5: d36145286daa040f00c2c4a8f279aa1e
 
IA-32:
xpdf-2.02-9.8.i386.rpm
File outdated by:  RHSA-2010:0750
    MD5: 5588e8d776743176ee1988803d1d7ad1
 
x86_64:
xpdf-2.02-9.8.x86_64.rpm
File outdated by:  RHSA-2010:0750
    MD5: 710b1db79adecdee276eae828602ee1e
 
Red Hat Desktop (v. 4)

SRPMS:
xpdf-3.00-11.10.src.rpm
File outdated by:  RHSA-2010:0751
    MD5: d9b785314985cb40a6140d3cb73fd2ab
 
IA-32:
xpdf-3.00-11.10.i386.rpm
File outdated by:  RHSA-2010:0751
    MD5: 79efaf8403963ebb2506c295d6b2f77d
 
x86_64:
xpdf-3.00-11.10.x86_64.rpm
File outdated by:  RHSA-2010:0751
    MD5: 05f1e4ecdf15bc2509b1807951f59298
 
Red Hat Enterprise Linux AS (v. 2.1)

SRPMS:
xpdf-0.92-17.src.rpm
File outdated by:  RHSA-2007:1031
    MD5: 62488b664f387dbc445f2599cd271fb1
 
IA-32:
xpdf-0.92-17.i386.rpm
File outdated by:  RHSA-2007:1031
    MD5: a35ec0b6b7dc5b0e3da4ef9693bb4f10
 
IA-64:
xpdf-0.92-17.ia64.rpm
File outdated by:  RHSA-2007:1031
    MD5: 35b35e3afa2988670448cbb11416f295
 
Red Hat Enterprise Linux AS (v. 3)

SRPMS:
xpdf-2.02-9.8.src.rpm
File outdated by:  RHSA-2010:0750
    MD5: d36145286daa040f00c2c4a8f279aa1e
 
IA-32:
xpdf-2.02-9.8.i386.rpm
File outdated by:  RHSA-2010:0750
    MD5: 5588e8d776743176ee1988803d1d7ad1
 
IA-64:
xpdf-2.02-9.8.ia64.rpm
File outdated by:  RHSA-2010:0750
    MD5: a8a44a7875d791e4a41ebc523b2a4160
 
PPC:
xpdf-2.02-9.8.ppc.rpm
File outdated by:  RHSA-2010:0750
    MD5: 2f0bb7d6a85d9887b9a6f8baa48c1914
 
s390:
xpdf-2.02-9.8.s390.rpm
File outdated by:  RHSA-2010:0750
    MD5: bbcffd95a3f13dd2b007d4719a7baf10
 
s390x:
xpdf-2.02-9.8.s390x.rpm
File outdated by:  RHSA-2010:0750
    MD5: ec00da6cceeace46c20c8396564c7bc9
 
x86_64:
xpdf-2.02-9.8.x86_64.rpm
File outdated by:  RHSA-2010:0750
    MD5: 710b1db79adecdee276eae828602ee1e
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
xpdf-3.00-11.10.src.rpm
File outdated by:  RHSA-2010:0751
    MD5: d9b785314985cb40a6140d3cb73fd2ab
 
IA-32:
xpdf-3.00-11.10.i386.rpm
File outdated by:  RHSA-2010:0751
    MD5: 79efaf8403963ebb2506c295d6b2f77d
 
IA-64:
xpdf-3.00-11.10.ia64.rpm
File outdated by:  RHSA-2010:0751
    MD5: b058289401c54ace50b57dae59b86fa0
 
PPC:
xpdf-3.00-11.10.ppc.rpm
File outdated by:  RHSA-2010:0751
    MD5: 128da0cd0f68b2953c131369f2028939
 
s390:
xpdf-3.00-11.10.s390.rpm
File outdated by:  RHSA-2010:0751
    MD5: 134f14919b8015aa392a0eab434d4d88
 
s390x:
xpdf-3.00-11.10.s390x.rpm
File outdated by:  RHSA-2010:0751
    MD5: 1647a4a8b76bbe27b2c4dc30d47ee7b8
 
x86_64:
xpdf-3.00-11.10.x86_64.rpm
File outdated by:  RHSA-2010:0751
    MD5: 05f1e4ecdf15bc2509b1807951f59298
 
Red Hat Enterprise Linux ES (v. 2.1)

SRPMS:
xpdf-0.92-17.src.rpm
File outdated by:  RHSA-2007:1031
    MD5: 62488b664f387dbc445f2599cd271fb1
 
IA-32:
xpdf-0.92-17.i386.rpm
File outdated by:  RHSA-2007:1031
    MD5: a35ec0b6b7dc5b0e3da4ef9693bb4f10
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
xpdf-2.02-9.8.src.rpm
File outdated by:  RHSA-2010:0750
    MD5: d36145286daa040f00c2c4a8f279aa1e
 
IA-32:
xpdf-2.02-9.8.i386.rpm
File outdated by:  RHSA-2010:0750
    MD5: 5588e8d776743176ee1988803d1d7ad1
 
IA-64:
xpdf-2.02-9.8.ia64.rpm
File outdated by:  RHSA-2010:0750
    MD5: a8a44a7875d791e4a41ebc523b2a4160
 
x86_64:
xpdf-2.02-9.8.x86_64.rpm
File outdated by:  RHSA-2010:0750
    MD5: 710b1db79adecdee276eae828602ee1e
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
xpdf-3.00-11.10.src.rpm
File outdated by:  RHSA-2010:0751
    MD5: d9b785314985cb40a6140d3cb73fd2ab
 
IA-32:
xpdf-3.00-11.10.i386.rpm
File outdated by:  RHSA-2010:0751
    MD5: 79efaf8403963ebb2506c295d6b2f77d
 
IA-64:
xpdf-3.00-11.10.ia64.rpm
File outdated by:  RHSA-2010:0751
    MD5: b058289401c54ace50b57dae59b86fa0
 
x86_64:
xpdf-3.00-11.10.x86_64.rpm
File outdated by:  RHSA-2010:0751
    MD5: 05f1e4ecdf15bc2509b1807951f59298
 
Red Hat Enterprise Linux WS (v. 2.1)

SRPMS:
xpdf-0.92-17.src.rpm
File outdated by:  RHSA-2007:1031
    MD5: 62488b664f387dbc445f2599cd271fb1
 
IA-32:
xpdf-0.92-17.i386.rpm
File outdated by:  RHSA-2007:1031
    MD5: a35ec0b6b7dc5b0e3da4ef9693bb4f10
 
Red Hat Enterprise Linux WS (v. 3)

SRPMS:
xpdf-2.02-9.8.src.rpm
File outdated by:  RHSA-2010:0750
    MD5: d36145286daa040f00c2c4a8f279aa1e
 
IA-32:
xpdf-2.02-9.8.i386.rpm
File outdated by:  RHSA-2010:0750
    MD5: 5588e8d776743176ee1988803d1d7ad1
 
IA-64:
xpdf-2.02-9.8.ia64.rpm
File outdated by:  RHSA-2010:0750
    MD5: a8a44a7875d791e4a41ebc523b2a4160
 
x86_64:
xpdf-2.02-9.8.x86_64.rpm
File outdated by:  RHSA-2010:0750
    MD5: 710b1db79adecdee276eae828602ee1e
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
xpdf-3.00-11.10.src.rpm
File outdated by:  RHSA-2010:0751
    MD5: d9b785314985cb40a6140d3cb73fd2ab
 
IA-32:
xpdf-3.00-11.10.i386.rpm
File outdated by:  RHSA-2010:0751
    MD5: 79efaf8403963ebb2506c295d6b2f77d
 
IA-64:
xpdf-3.00-11.10.ia64.rpm
File outdated by:  RHSA-2010:0751
    MD5: b058289401c54ace50b57dae59b86fa0
 
x86_64:
xpdf-3.00-11.10.x86_64.rpm
File outdated by:  RHSA-2010:0751
    MD5: 05f1e4ecdf15bc2509b1807951f59298
 
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor

SRPMS:
xpdf-0.92-17.src.rpm
File outdated by:  RHSA-2007:1031
    MD5: 62488b664f387dbc445f2599cd271fb1
 
IA-64:
xpdf-0.92-17.ia64.rpm
File outdated by:  RHSA-2007:1031
    MD5: 35b35e3afa2988670448cbb11416f295
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

173888 - CVE-2005-3193 xpdf issues (CVE-2005-3191 CVE-2005-3192)


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/