Advisories

Mandriva Advisories

Package name xpdf Date February 17th, 2005 Advisory ID MDKSA-2005:043 Affected versions 10.0, 10.1, CS2.1, CS3.0 Synopsis Updated xpdf packages fix vulnerabilities on 64 bit platforms

Problem Description

Previous updates to correct integer overflow issues affecting xpdf
overlooked certain conditions when built for a 64 bit platform.
(formerly CAN-2004-0888). This also affects applications that use
embedded versions of xpdf.

The updated packages are patched to deal with these issues.

Updated Packages

Mandrakelinux 10.0/AMD64

 6dfa3bb16bc3505df4a3611578dbd6dc  amd64/10.0/RPMS/xpdf-3.00-5.5.100mdk.amd64.rpm
37c95383532c1e8d1e189cd1aa18f356  amd64/10.0/SRPMS/xpdf-3.00-5.5.100mdk.src.rpm

Mandrakelinux 10.1/X86_64

 79d6c0f92cf1e00da8d62adfd0968009  x86_64/10.1/RPMS/xpdf-3.00-7.4.101mdk.x86_64.rpm
65a16347a285c376355f4dc4b7fcdc2f  x86_64/10.1/SRPMS/xpdf-3.00-7.4.101mdk.src.rpm

Corporate Server 2.1/X86_64

 22405ca391960b74c2dad5cbe372f9cd  x86_64/corporate/2.1/RPMS/xpdf-1.01-4.9.C21mdk.x86_64.rpm
00044a02e6689ecdd8af09ed7ec3f1c5  x86_64/corporate/2.1/SRPMS/xpdf-1.01-4.9.C21mdk.src.rpm

Corporate Server 3.0/X86_64

 eb4a5ff36fb13a17cd2508d9c3cbfb3d  x86_64/corporate/3.0/RPMS/xpdf-3.00-5.5.C30mdk.x86_64.rpm
7be80ea54ba1dc2278557d3475b0a0f4  x86_64/corporate/3.0/SRPMS/xpdf-3.00-5.5.C30mdk.src.rpm

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0206

Upgrade

To upgrade automatically, use MandrivaUpdate.

Verification

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :

                rpm --checksig package.rpm
                

You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.

If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.