A new update is available for Fedora Core - [SECURITY] Fedora Core 3 Update: gpdf-2.8.2-6.2. Here the announcement:
Fedora Update Notification
FEDORA-2005-1146
2005-12-14
---------------------------------------------------------------------
Product : Fedora Core 3
Name : gpdf
Version : 2.8.2
Release : 6.2
Summary : viewer for Portable Document Format (PDF) files for GNOME
Description :
This is GPdf, a viewer for Portable Document Format (PDF) files for
GNOME. GPdf is based on the Xpdf program and uses additional GNOME
libraries for better desktop integration.
GPdf includes the gpdf application, a Bonobo control for PDF display
which can be embedded in Nautilus, and a Nautilus property page for
PDF files.
---------------------------------------------------------------------
Update Information:
Several more flaws were discovered in Xpdf, which is used
internally by gpdf. An attacker could
construct a carefully crafted PDF file that could cause gpdf
to crash or possibly execute arbitrary code when opened. The
Common Vulnerabilities and Exposures project assigned the
name CAN-2005-3193 to these issues.
Users of gpdf should upgrade to this updated package, which
contains a patch to resolve these issues.
---------------------------------------------------------------------
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
0d559eb6690bbf9a83295b610b79e858 SRPMS/gpdf-2.8.2-6.2.src.rpm
eac2349c3f5468091db4e3f16d26a5ad x86_64/gpdf-2.8.2-6.2.x86_64.rpm
cf132355c60bca655fc30d1cf3ad49da x86_64/debug/gpdf-debuginfo-2.8.2-6.2.x86_64.rpm
e25a54925b6a6f853b891d3920d5d5c6 i386/gpdf-2.8.2-6.2.i386.rpm
e0211d3471d8fbd130e146acc04051b5 i386/debug/gpdf-debuginfo-2.8.2-6.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.