The Debian Security Team published a new security update for Debian GNU/Linux. Here the announcement:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
Debian Security Advisory DSA 984-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
March 2nd, 2006 http://www.debian.org/security/faq
- --------------------------------------------------------------------------
Package : xpdf
Vulnerability : several
Problem type : local (remote)
Debian-specific: no
Derek Noonburg has fixed several potential vulnerabilities in xpdf,
the Portable Document Format (PDF) suite.
The old stable distribution (woody) does not seem to be affected.
For the stable distribution (sarge) these problems have been fixed in
version 3.00-13.6.
For the unstable distribution (sid) these problems have been fixed in
version 3.01-7.
We recommend that you upgrade your xpdf packages.
Upgrade Instructions
- --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
- --------------------------------
Source archives:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf_3.00-13.6.dsc
Size/MD5 checksum: 781 3b09a41551eb88e135d4c1545edc3897
http://security.debian.org/pool/updates/main/x/xpdf/xpdf_3.00-13.6.diff.gz
Size/MD5 checksum: 51817 20487e64403271f8193ddc959ff46d06
http://security.debian.org/pool/updates/main/x/xpdf/xpdf_3.00.orig.tar.gz
Size/MD5 checksum: 534697 95294cef3031dd68e65f331e8750b2c2
Architecture independent components:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-common_3.00-13.6_all.deb
Size/MD5 checksum: 56592 49fcfd17053fba4b288e0ce69660f108
http://security.debian.org/pool/updates/main/x/xpdf/xpdf_3.00-13.6_all.deb
Size/MD5 checksum: 1284 91afb670cc3c9c19fb1e153c650f5fc1
Alpha architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_alpha.deb
Size/MD5 checksum: 802784 6db7693ed94beda4f4918e8a639e0165
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_alpha.deb
Size/MD5 checksum: 1528860 edaa31b0b8c87b8605f4fddbe5197826
AMD64 architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_amd64.deb
Size/MD5 checksum: 668468 6038c7858722032cef42823af1ceb27d
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_amd64.deb
Size/MD5 checksum: 1275066 cad43af52cea66d5e2e046eaf0b0c734
ARM architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_arm.deb
Size/MD5 checksum: 675102 933e77479fa35243f25b9cf0a7af9960
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_arm.deb
Size/MD5 checksum: 1279998 a2618d91a020e91f4a543526b00bab7e
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_i386.deb
Size/MD5 checksum: 657110 7da2961c7030f4753ea677d40c7e8264
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_i386.deb
Size/MD5 checksum: 1242800 1fe93e71851091093ad61e0fc9e207ef
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_ia64.deb
Size/MD5 checksum: 951326 055fe0db7d1f7111cc6370f65d45f439
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_ia64.deb
Size/MD5 checksum: 1802816 f9168deac0eda96b115bde2fbbf422e6
HP Precision architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_hppa.deb
Size/MD5 checksum: 833234 53a85c49c0d0ed760da1ac5bd256cc1c
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_hppa.deb
Size/MD5 checksum: 1581132 b830198ef741369f777e4a231c2b2352
Motorola 680x0 architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_m68k.deb
Size/MD5 checksum: 586338 a951da441c2a3288622b116932faa42d
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_m68k.deb
Size/MD5 checksum: 1117564 2fa1b6c62f770dbae84a02ca274fc0be
Big endian MIPS architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_mips.deb
Size/MD5 checksum: 808166 590198eb28d9ed0d6b32be9d1bac320b
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_mips.deb
Size/MD5 checksum: 1525622 64de5bac988b7dc970cbf4e2ac5c991e
Little endian MIPS architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_mipsel.deb
Size/MD5 checksum: 798476 f269b9c1fc2ed4b90c32f4c53b0a8c91
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_mipsel.deb
Size/MD5 checksum: 1504284 998fc34caadad1809fcb5bfe8d9dccd1
PowerPC architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_powerpc.deb
Size/MD5 checksum: 694632 bc97e0eb5dbaa07f107507d5f956f1c6
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_powerpc.deb
Size/MD5 checksum: 1313730 8851ce3bb1bc3fd71a3e6ced3080e392
IBM S/390 architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_s390.deb
Size/MD5 checksum: 631038 0ffbacdcf61d48ba58c27c3a21156520
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_s390.deb
Size/MD5 checksum: 1199354 3d551ef88027086a58bbe6e2312728fe
Sun Sparc architecture:
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_3.00-13.6_sparc.deb
Size/MD5 checksum: 626786 9ab324a84408a8ab36b6d334d8ca0a65
http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_3.00-13.6_sparc.deb
Size/MD5 checksum: 1182350 bc265faf7e76574c8256e33d17b6faeb
These files will probably be moved into the stable distribution on
its next update.
- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFEBtoyW5ql+IAeqTIRAqt9AKCxS2vwEbRHxlY6UPNgQj4H5FKx8wCfdJWa
jp4TZxeaK2w3GTOUcb+XPPM=
=o28I
-----END PGP SIGNATURE-----
