Skip to navigation

Security Advisory gpdf security update

Advisory: RHSA-2005:867-5
Type: Security Advisory
Severity: Important
Issued on: 2005-12-20
Last updated on: 2005-12-20
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
CVEs (cve.mitre.org): CVE-2005-3191
CVE-2005-3192
CVE-2005-3193
CVE-2005-3628

Details

An updated gpdf package that fixes several security issues is now available
for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

The gpdf package is a GNOME based viewer for Portable Document Format
(PDF) files.

Several flaws were discovered in gpdf. An attacker could construct a
carefully crafted PDF file that could cause gpdf to crash or possibly
execute arbitrary code when opened. The Common Vulnerabilities and
Exposures project assigned the names CVE-2005-3191, CVE-2005-3192, and
CVE-2005-3193 to these issues.

Users of gpdf should upgrade to this updated package, which contains a
backported patch to resolve these issues.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Updated packages

Red Hat Desktop (v. 4)

SRPMS:
gpdf-2.8.2-7.3.src.rpm
File outdated by:  RHSA-2010:0752
    MD5: b365aac32d140ef324ab0eb2c7cf3bfd
 
IA-32:
gpdf-2.8.2-7.3.i386.rpm
File outdated by:  RHSA-2010:0752
    MD5: a3f8659efab116042f37cfc9d227dc82
 
x86_64:
gpdf-2.8.2-7.3.x86_64.rpm
File outdated by:  RHSA-2010:0752
    MD5: e7aff4c218078b599959d90b968fffd0
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
gpdf-2.8.2-7.3.src.rpm
File outdated by:  RHSA-2010:0752
    MD5: b365aac32d140ef324ab0eb2c7cf3bfd
 
IA-32:
gpdf-2.8.2-7.3.i386.rpm
File outdated by:  RHSA-2010:0752
    MD5: a3f8659efab116042f37cfc9d227dc82
 
IA-64:
gpdf-2.8.2-7.3.ia64.rpm
File outdated by:  RHSA-2010:0752
    MD5: d429fc7fef00acef1468cddd11d2bbea
 
PPC:
gpdf-2.8.2-7.3.ppc.rpm
File outdated by:  RHSA-2010:0752
    MD5: af418aad8b7c3b556359d41b42860745
 
s390:
gpdf-2.8.2-7.3.s390.rpm
File outdated by:  RHSA-2010:0752
    MD5: dc073f271f99420aea8d2bf7a3fc13a4
 
s390x:
gpdf-2.8.2-7.3.s390x.rpm
File outdated by:  RHSA-2010:0752
    MD5: 3978d2d5f302b2313f6a06162dffdc20
 
x86_64:
gpdf-2.8.2-7.3.x86_64.rpm
File outdated by:  RHSA-2010:0752
    MD5: e7aff4c218078b599959d90b968fffd0
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
gpdf-2.8.2-7.3.src.rpm
File outdated by:  RHSA-2010:0752
    MD5: b365aac32d140ef324ab0eb2c7cf3bfd
 
IA-32:
gpdf-2.8.2-7.3.i386.rpm
File outdated by:  RHSA-2010:0752
    MD5: a3f8659efab116042f37cfc9d227dc82
 
IA-64:
gpdf-2.8.2-7.3.ia64.rpm
File outdated by:  RHSA-2010:0752
    MD5: d429fc7fef00acef1468cddd11d2bbea
 
x86_64:
gpdf-2.8.2-7.3.x86_64.rpm
File outdated by:  RHSA-2010:0752
    MD5: e7aff4c218078b599959d90b968fffd0
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
gpdf-2.8.2-7.3.src.rpm
File outdated by:  RHSA-2010:0752
    MD5: b365aac32d140ef324ab0eb2c7cf3bfd
 
IA-32:
gpdf-2.8.2-7.3.i386.rpm
File outdated by:  RHSA-2010:0752
    MD5: a3f8659efab116042f37cfc9d227dc82
 
IA-64:
gpdf-2.8.2-7.3.ia64.rpm
File outdated by:  RHSA-2010:0752
    MD5: d429fc7fef00acef1468cddd11d2bbea
 
x86_64:
gpdf-2.8.2-7.3.x86_64.rpm
File outdated by:  RHSA-2010:0752
    MD5: e7aff4c218078b599959d90b968fffd0
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

175100 - CVE-2005-3193 xpdf issues (CVE-2005-3191 CVE-2005-3192)


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/