A xpdf security update has been released for Fedora Core 2

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-572
2004-12-22
---------------------------------------------------------------------

Product : Fedora Core 2
Name : xpdf
Version : 3.00

Release : 3.6

Summary : A PDF file viewer for the X Window System.
Description :
Xpdf is an X Window System based viewer for Portable Document Format (PDF) files. Xpdf is a small and efficient program which uses standard X fonts.



---------------------------------------------------------------------
Update Information:

This package fixes a buffer overflow which allows attackers to cause the xpdf application to crash, and possibly to execute arbitrary code. The Common Vulnerabilities and Exposures projects (cve.mitre.org) has assigned the name CAN-2004-1125 to this issue.

---------------------------------------------------------------------
* Wed Dec 22 2004 Tim Waugh twaugh@redhat.com 1:3.00-3.6

- Applied patch to fix CAN-2004-1125 (bug #143500).


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

917422b5087ab12727223d4e570ade55 SRPMS/xpdf-3.00-3.6.src.rpm
293af32ed4f834a436dcdd1ddf7eab1b x86_64/xpdf-3.00-3.6.x86_64.rpm
ff615294add6b4b8de966ff09168cfd9 x86_64/debug/xpdf-debuginfo-3.00-3.6.x86_
64.rpm
2c70874a77f954e1de778457d4889154 i386/xpdf-3.00-3.6.i386.rpm
3222f6518777a6dcef53714a0b050c6d i386/debug/xpdf-debuginfo-3.00-3.6.i386.r
pm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.