Home > Security > Advisories

Advisories

Mandriva Advisories

Package name poppler
Date August 13th, 2007
Advisory ID MDKSA-2007:161
Affected versions 2007.0, CS4.0, 2007.1
Synopsis Updated poppler packages fix vulnerability

Problem Description

Maurycy Prodeus found an integer overflow vulnerability in the way
various PDF viewers processed PDF files. An attacker could create
a malicious PDF file that could cause poppler to crash and possibly
execute arbitrary code open a user opening the file.

This update provides packages which are patched to prevent these
issues.

Updated Packages

Mandriva Linux 2007

 ff1a936825b13adf6e0d244d0128efa4  2007.0/i586/libpoppler-qt1-0.5.3-5.3mdv2007.0.i586.rpm
 9d28c724d9e3913761fa1d0528cb7cb8  2007.0/i586/libpoppler-qt1-devel-0.5.3-5.3mdv2007.0.i586.rpm
 fa4b5cf01b38c572d741ef08fe04b293  2007.0/i586/libpoppler-qt4-1-0.5.3-5.3mdv2007.0.i586.rpm
 e35a3598cbc0f29c4c21e675e6391ff3  2007.0/i586/libpoppler-qt4-1-devel-0.5.3-5.3mdv2007.0.i586.rpm
 1702a9c16e72fe89f9aa1b78ff6055b5  2007.0/i586/libpoppler1-0.5.3-5.3mdv2007.0.i586.rpm
 0f1f330e28674ce2e67e56f3614b4d2c  2007.0/i586/libpoppler1-devel-0.5.3-5.3mdv2007.0.i586.rpm
 b619db3ef9b9545adf9f864f2972db97  2007.0/i586/poppler-0.5.3-5.3mdv2007.0.i586.rpm 
 9a311578c1933c8ec6ddb2f8b4e93445  2007.0/SRPMS/poppler-0.5.3-5.3mdv2007.0.src.rpm

Mandriva Linux 2007/X86_64

 c8b111069fa66ce0682dacf1e3de01f9  2007.0/x86_64/lib64poppler-qt1-0.5.3-5.3mdv2007.0.x86_64.rpm
 7434c137fd66482914aa6996f1aae55c  2007.0/x86_64/lib64poppler-qt1-devel-0.5.3-5.3mdv2007.0.x86_64.rpm
 1b01f4d5f77ce2f08f09ca942c409b60  2007.0/x86_64/lib64poppler-qt4-1-0.5.3-5.3mdv2007.0.x86_64.rpm
 cbc85b288f7e0e35a3c97c0e3731e6ef  2007.0/x86_64/lib64poppler-qt4-1-devel-0.5.3-5.3mdv2007.0.x86_64.rpm
 db95938d3c09131729b80a7283d359c9  2007.0/x86_64/lib64poppler1-0.5.3-5.3mdv2007.0.x86_64.rpm
 ccc128242680e5f90fb49026b83daa04  2007.0/x86_64/lib64poppler1-devel-0.5.3-5.3mdv2007.0.x86_64.rpm
 714996d0cc629e62649360749a9050f0  2007.0/x86_64/poppler-0.5.3-5.3mdv2007.0.x86_64.rpm 
 9a311578c1933c8ec6ddb2f8b4e93445  2007.0/SRPMS/poppler-0.5.3-5.3mdv2007.0.src.rpm

Corporate Server 4.0

 f8b99d883919ba20e7f46aa71448edb5  corporate/4.0/i586/libpoppler-qt0-0.4.1-3.5.20060mlcs4.i586.rpm
 89e37529b304258acd4999c5fbfadec7  corporate/4.0/i586/libpoppler-qt0-devel-0.4.1-3.5.20060mlcs4.i586.rpm
 97b9de6aa6c6617c21b7e9bbea3a517b  corporate/4.0/i586/libpoppler0-0.4.1-3.5.20060mlcs4.i586.rpm
 94232bb5dad116fdd2a4b342c7205eb3  corporate/4.0/i586/libpoppler0-devel-0.4.1-3.5.20060mlcs4.i586.rpm 
 45ba9d12e59c1cbb4aae41988d5983c3  corporate/4.0/SRPMS/poppler-0.4.1-3.5.20060mlcs4.src.rpm

Corporate Server 4.0/X86_64

 4ee1af44c82311a075abd9bec021935c  corporate/4.0/x86_64/lib64poppler-qt0-0.4.1-3.5.20060mlcs4.x86_64.rpm
 53fbebb09587d1949951ad4a9d6a9eab  corporate/4.0/x86_64/lib64poppler-qt0-devel-0.4.1-3.5.20060mlcs4.x86_64.rpm
 2153b37ce8cd3a29bbf6d31a68a50558  corporate/4.0/x86_64/lib64poppler0-0.4.1-3.5.20060mlcs4.x86_64.rpm
 43bacfb48b585a0f8903c32ed5ebe775  corporate/4.0/x86_64/lib64poppler0-devel-0.4.1-3.5.20060mlcs4.x86_64.rpm 
 45ba9d12e59c1cbb4aae41988d5983c3  corporate/4.0/SRPMS/poppler-0.4.1-3.5.20060mlcs4.src.rpm

Mandriva Linux 2007.1

 2ef41e36faff21f62fbec2bf89e7b6f1  2007.1/i586/libpoppler-qt1-0.5.4-3.2mdv2007.1.i586.rpm
 377e85d2c599a82f3871f138494f322c  2007.1/i586/libpoppler-qt1-devel-0.5.4-3.2mdv2007.1.i586.rpm
 a3219588e17b2cc3189e5395ec5dd475  2007.1/i586/libpoppler-qt4-1-0.5.4-3.2mdv2007.1.i586.rpm
 81344c8e3eb0437559e3e5c0eac62631  2007.1/i586/libpoppler-qt4-1-devel-0.5.4-3.2mdv2007.1.i586.rpm
 b78ab182aac571c2a99fae0a5d470927  2007.1/i586/libpoppler1-0.5.4-3.2mdv2007.1.i586.rpm
 87893636c37eb5db131127f89695df0f  2007.1/i586/libpoppler1-devel-0.5.4-3.2mdv2007.1.i586.rpm
 6ff7146293ee8aec15574d4aa89d6a2f  2007.1/i586/poppler-0.5.4-3.2mdv2007.1.i586.rpm 
 87111ab66842ea16932e76614932f024  2007.1/SRPMS/poppler-0.5.4-3.2mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64

 6739512a718b2ba794d33c567703f9ad  2007.1/x86_64/lib64poppler-qt1-0.5.4-3.2mdv2007.1.x86_64.rpm
 37b8f40a836b910455ed43a252303dc7  2007.1/x86_64/lib64poppler-qt1-devel-0.5.4-3.2mdv2007.1.x86_64.rpm
 747be5e90c821630dd349ba16ef698b4  2007.1/x86_64/lib64poppler-qt4-1-0.5.4-3.2mdv2007.1.x86_64.rpm
 153745ad2a655b8e1262c82ae1fc70a4  2007.1/x86_64/lib64poppler-qt4-1-devel-0.5.4-3.2mdv2007.1.x86_64.rpm
 b59db62be7a4d73a8f0de227da0d5354  2007.1/x86_64/lib64poppler1-0.5.4-3.2mdv2007.1.x86_64.rpm
 47541453858a863a482a316cf14d56b6  2007.1/x86_64/lib64poppler1-devel-0.5.4-3.2mdv2007.1.x86_64.rpm
 9ac6efa64431cf7144e77375ba90769b  2007.1/x86_64/poppler-0.5.4-3.2mdv2007.1.x86_64.rpm 
 87111ab66842ea16932e76614932f024  2007.1/SRPMS/poppler-0.5.4-3.2mdv2007.1.src.rpm

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387

Upgrade

To upgrade automatically, use MandrivaUpdate.


Verification

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :

                rpm --checksig package.rpm

You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.

If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.