Fedora Essential and Critical Security Patch Updates - Page 824

Fedora Core 3 Update: gpdf-2.8.2-7.2

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Chris Evans discovered several flaws in the way CUPS processes PDF files. An attacker could construct a carefully crafted PDF file that could cause CUPS to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, and CVE-2005-3627 to these issues.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: poppler-0.4.4-1.1

Chris Evans discovered several flaws in the way poppler processes PDF files. An attacker could construct a carefully crafted PDF file that could cause poppler to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, and CVE-2005-3627 to these issues.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: xpdf-3.01-0.FC4.6

Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-3193 to these issues. Users of xpdf should upgrade to this updated package, which contains a patch to resolve these issues.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: tetex-3.0-9.FC4

Several flaws were discovered in the way teTeX processes PDF files. An attacker could construct a carefully crafted PDF file that could cause poppler to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3625, CVE-2005-3626, and CVE-2005-3627 to these issues. This package also updates bindings in texdoc and causes the local texmf tree to be searched first.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 3 Update: tetex-2.0.2-21.7.FC3

Several flaws were discovered in the way teTeX processes PDF files. An attacker could construct a carefully crafted PDF file that could cause poppler to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, and CVE-2005-3627 to these issues.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: kdegraphics-3.5.0-0.2.fc4

Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-3193 to these issues. Users of kdegraphics should upgrade to this updated package, which contains a patch to resolve these issues.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: kdelibs-3.5.0-0.4.fc4

A heap overflow flaw was discovered affecting kjs, the JavaScript interpreter engine used by Konqueror and other parts of KDE. An attacker could create a malicious web site containing carefully crafted JavaScript code that would trigger this flaw and possibly lead to arbitrary code execution. The Common Vulnerabilities and Exposures project assigned the name CVE-2006-0019 to this issue. Users of KDE should upgrade to these updated packages, which contain a backported patch from the KDE security team correcting this issue

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: httpd-2.0.54-10.3

This update includes fixes for three security issues in the Apache HTTP Server.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: openssh-4.2p1-fc4.10

This is a minor security update which fixes double shell expansion in local to local and remote to remote copy with scp. It also fixes a few other minor non-security issues.

LinuxSecurity.com Team
Jan 27, 2006

Fedora Core 4 Update: qt-3.3.4-15.4

Updated package.

LinuxSecurity.com Team
Sep 16, 2005

Fedora Core 4 Update: dia-0.94-12.fc4

Updated package.

LinuxSecurity.com Team
Sep 16, 2005

Fedora Core 4 Update: libwnck-2.10.3-1

This update upgrades libwnck to version 2.10.3 in order to work well with metacity 2.10.3. This updated package corrects the behavior of workspace switching when minized windows from a different workspace than the current workspace are activated.