--------------------------------------------------------------------- Fedora Update Notification FEDORA-2006-105 2006-02-10 --------------------------------------------------------------------- Product : Fedora Core 4 Name : kdegraphics Version : 3.5.1 Release : 0.2.fc4 Summary : K Desktop Environment - Graphics Applications Description : Graphics applications for the K Desktop Environment. Includes: kdvi (displays TeX .dvi files) kfax (displays faxfiles) kghostview (displays postscript files) kcoloredit (palette editor and color chooser) kamera (digital camera support) kiconedit (icon editor) kpaint (a simple drawing program) ksnapshot (screen capture utility) kview (image viewer for GIF, JPEG, TIFF, etc.) kuickshow (quick picture viewer) kooka (scanner application) kruler (screen ruler and color measurement tool) --------------------------------------------------------------------- Update Information: kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a heap based buffer overflow in the splash rasterizer engine that can crash kpdf or even execute arbitrary code. Users impacted by these issues, should update to this new package release. --------------------------------------------------------------------- * Tue Feb 7 2006 Than Ngo <than@xxxxxxxxxx> 7:3.5.1-0.2.fc4 - apply patch to fix buffer overflow in kpdf, CVE-2006-0301 (#179056) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ 4ed4ed8ca7762a7140b4aea37862078bc3758988 SRPMS/kdegraphics-3.5.1-0.2.fc4.src.rpm 3a9a3b3777eff2ac02ff21ba78151d25c3395a9d ppc/kdegraphics-3.5.1-0.2.fc4.ppc.rpm 9c25998f60be8531e2e1a4366611501d2adee26e ppc/kdegraphics-devel-3.5.1-0.2.fc4.ppc.rpm 296f883442cba8315c5b23799d3488ffaa843c89 ppc/debug/kdegraphics-debuginfo-3.5.1-0.2.fc4.ppc.rpm 03990a0a90d0bc769494759727b2e76f20cde814 x86_64/kdegraphics-3.5.1-0.2.fc4.x86_64.rpm 2ab08e61a5137f1833f8ca815a5dc025aba38ae6 x86_64/kdegraphics-devel-3.5.1-0.2.fc4.x86_64.rpm 9c539d49ecc4be772816d8c3989951736d7454a3 x86_64/debug/kdegraphics-debuginfo-3.5.1-0.2.fc4.x86_64.rpm a99acaa35091e76a25a51acad2e7fe0a3719720d i386/kdegraphics-3.5.1-0.2.fc4.i386.rpm ce4cc146300daa51cb37089de8aefbd407a7a102 i386/kdegraphics-devel-3.5.1-0.2.fc4.i386.rpm 5b918d77c186fa41958dc5ac503e2367afe23c58 i386/debug/kdegraphics-debuginfo-3.5.1-0.2.fc4.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. --------------------------------------------------------------------- -- fedora-announce-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-announce-list