-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDKSA-2007:161 http://www.mandriva.com/security/ _______________________________________________________________________ Package : poppler Date : August 13, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 _______________________________________________________________________ Problem Description: Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause poppler to crash and possibly execute arbitrary code open a user opening the file. This update provides packages which are patched to prevent these issues. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387 _______________________________________________________________________ Updated Packages: Mandriva Linux 2007.0: ff1a936825b13adf6e0d244d0128efa4 2007.0/i586/libpoppler-qt1-0.5.3-5.3mdv2007.0.i586.rpm 9d28c724d9e3913761fa1d0528cb7cb8 2007.0/i586/libpoppler-qt1-devel-0.5.3-5.3mdv2007.0.i586.rpm fa4b5cf01b38c572d741ef08fe04b293 2007.0/i586/libpoppler-qt4-1-0.5.3-5.3mdv2007.0.i586.rpm e35a3598cbc0f29c4c21e675e6391ff3 2007.0/i586/libpoppler-qt4-1-devel-0.5.3-5.3mdv2007.0.i586.rpm 1702a9c16e72fe89f9aa1b78ff6055b5 2007.0/i586/libpoppler1-0.5.3-5.3mdv2007.0.i586.rpm 0f1f330e28674ce2e67e56f3614b4d2c 2007.0/i586/libpoppler1-devel-0.5.3-5.3mdv2007.0.i586.rpm b619db3ef9b9545adf9f864f2972db97 2007.0/i586/poppler-0.5.3-5.3mdv2007.0.i586.rpm 9a311578c1933c8ec6ddb2f8b4e93445 2007.0/SRPMS/poppler-0.5.3-5.3mdv2007.0.src.rpm Mandriva Linux 2007.0/X86_64: c8b111069fa66ce0682dacf1e3de01f9 2007.0/x86_64/lib64poppler-qt1-0.5.3-5.3mdv2007.0.x86_64.rpm 7434c137fd66482914aa6996f1aae55c 2007.0/x86_64/lib64poppler-qt1-devel-0.5.3-5.3mdv2007.0.x86_64.rpm 1b01f4d5f77ce2f08f09ca942c409b60 2007.0/x86_64/lib64poppler-qt4-1-0.5.3-5.3mdv2007.0.x86_64.rpm cbc85b288f7e0e35a3c97c0e3731e6ef 2007.0/x86_64/lib64poppler-qt4-1-devel-0.5.3-5.3mdv2007.0.x86_64.rpm db95938d3c09131729b80a7283d359c9 2007.0/x86_64/lib64poppler1-0.5.3-5.3mdv2007.0.x86_64.rpm ccc128242680e5f90fb49026b83daa04 2007.0/x86_64/lib64poppler1-devel-0.5.3-5.3mdv2007.0.x86_64.rpm 714996d0cc629e62649360749a9050f0 2007.0/x86_64/poppler-0.5.3-5.3mdv2007.0.x86_64.rpm 9a311578c1933c8ec6ddb2f8b4e93445 2007.0/SRPMS/poppler-0.5.3-5.3mdv2007.0.src.rpm Mandriva Linux 2007.1: 2ef41e36faff21f62fbec2bf89e7b6f1 2007.1/i586/libpoppler-qt1-0.5.4-3.2mdv2007.1.i586.rpm 377e85d2c599a82f3871f138494f322c 2007.1/i586/libpoppler-qt1-devel-0.5.4-3.2mdv2007.1.i586.rpm a3219588e17b2cc3189e5395ec5dd475 2007.1/i586/libpoppler-qt4-1-0.5.4-3.2mdv2007.1.i586.rpm 81344c8e3eb0437559e3e5c0eac62631 2007.1/i586/libpoppler-qt4-1-devel-0.5.4-3.2mdv2007.1.i586.rpm b78ab182aac571c2a99fae0a5d470927 2007.1/i586/libpoppler1-0.5.4-3.2mdv2007.1.i586.rpm 87893636c37eb5db131127f89695df0f 2007.1/i586/libpoppler1-devel-0.5.4-3.2mdv2007.1.i586.rpm 6ff7146293ee8aec15574d4aa89d6a2f 2007.1/i586/poppler-0.5.4-3.2mdv2007.1.i586.rpm 87111ab66842ea16932e76614932f024 2007.1/SRPMS/poppler-0.5.4-3.2mdv2007.1.src.rpm Mandriva Linux 2007.1/X86_64: 6739512a718b2ba794d33c567703f9ad 2007.1/x86_64/lib64poppler-qt1-0.5.4-3.2mdv2007.1.x86_64.rpm 37b8f40a836b910455ed43a252303dc7 2007.1/x86_64/lib64poppler-qt1-devel-0.5.4-3.2mdv2007.1.x86_64.rpm 747be5e90c821630dd349ba16ef698b4 2007.1/x86_64/lib64poppler-qt4-1-0.5.4-3.2mdv2007.1.x86_64.rpm 153745ad2a655b8e1262c82ae1fc70a4 2007.1/x86_64/lib64poppler-qt4-1-devel-0.5.4-3.2mdv2007.1.x86_64.rpm b59db62be7a4d73a8f0de227da0d5354 2007.1/x86_64/lib64poppler1-0.5.4-3.2mdv2007.1.x86_64.rpm 47541453858a863a482a316cf14d56b6 2007.1/x86_64/lib64poppler1-devel-0.5.4-3.2mdv2007.1.x86_64.rpm 9ac6efa64431cf7144e77375ba90769b 2007.1/x86_64/poppler-0.5.4-3.2mdv2007.1.x86_64.rpm 87111ab66842ea16932e76614932f024 2007.1/SRPMS/poppler-0.5.4-3.2mdv2007.1.src.rpm Corporate 4.0: f8b99d883919ba20e7f46aa71448edb5 corporate/4.0/i586/libpoppler-qt0-0.4.1-3.5.20060mlcs4.i586.rpm 89e37529b304258acd4999c5fbfadec7 corporate/4.0/i586/libpoppler-qt0-devel-0.4.1-3.5.20060mlcs4.i586.rpm 97b9de6aa6c6617c21b7e9bbea3a517b corporate/4.0/i586/libpoppler0-0.4.1-3.5.20060mlcs4.i586.rpm 94232bb5dad116fdd2a4b342c7205eb3 corporate/4.0/i586/libpoppler0-devel-0.4.1-3.5.20060mlcs4.i586.rpm 45ba9d12e59c1cbb4aae41988d5983c3 corporate/4.0/SRPMS/poppler-0.4.1-3.5.20060mlcs4.src.rpm Corporate 4.0/X86_64: 4ee1af44c82311a075abd9bec021935c corporate/4.0/x86_64/lib64poppler-qt0-0.4.1-3.5.20060mlcs4.x86_64.rpm 53fbebb09587d1949951ad4a9d6a9eab corporate/4.0/x86_64/lib64poppler-qt0-devel-0.4.1-3.5.20060mlcs4.x86_64.rpm 2153b37ce8cd3a29bbf6d31a68a50558 corporate/4.0/x86_64/lib64poppler0-0.4.1-3.5.20060mlcs4.x86_64.rpm 43bacfb48b585a0f8903c32ed5ebe775 corporate/4.0/x86_64/lib64poppler0-devel-0.4.1-3.5.20060mlcs4.x86_64.rpm 45ba9d12e59c1cbb4aae41988d5983c3 corporate/4.0/SRPMS/poppler-0.4.1-3.5.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGwPBbmqjQ0CJFipgRAke6AJ0ZMJ2HlM+nB5i1r9L40KS3SJn9hwCdFe17 9NTmGQlz+1QpS8Zr/EaiHHY= =vt6P -----END PGP SIGNATURE-----
