| |||||||||||||||||||
Fedora alert FEDORA-2009-10845 (poppler)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10845 2009-10-27 05:03:29 -------------------------------------------------------------------------------- Name : poppler Product : Fedora 11 Version : 0.10.7 Release : 3.fc11 URL : http://poppler.freedesktop.org/ Summary : PDF rendering library Description : Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC. -------------------------------------------------------------------------------- Update Information: This build addresses several recent security issues. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 25 2009 Rex Dieter <rdieter@fedoraproject.org> - 0.10.7-3 - CVE-2009-3603 xpdf/popppler: SplashBitmap::SplashBitmap integer overflow (#526915) - CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check(#526911) - CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow (#526877) - CVE-2009-3607 poppler: create_surface_from_thumbnail_data integer overflow (#526924) - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (#526637) - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow (#526893) * Mon Jun 22 2009 Rex Dieter <rdieter@fedoraproject.org> - 0.10.7-2 - reduce lib deps in qt/qt4 pkg-config support * Fri Jun 19 2009 Rex Dieter <rdieter@fedoraproject.org> - 0.10.7-1 - Update to 0.10.7 - --enable-libjpeg --enable-libopenjpeg - (explicitly) --disable-zlib - %files: track sonames -------------------------------------------------------------------------------- References: [ 1 ] Bug #526915 - CVE-2009-3603 xpdf/poppler: SplashBitmap::SplashBitmap integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526915 [ 2 ] Bug #526911 - CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check https://bugzilla.redhat.com/show_bug.cgi?id=526911 [ 3 ] Bug #526877 - CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526877 [ 4 ] Bug #526924 - CVE-2009-3607 poppler: create_surface_from_thumbnail_data integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526924 [ 5 ] Bug #526637 - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016) https://bugzilla.redhat.com/show_bug.cgi?id=526637 [ 6 ] Bug #526893 - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=526893 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update poppler' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann... (Log in to post comments)
|
|||||||||||||||||||