Fedora Linux 8783 Published by

A new update is available for Fedora Core - [SECURITY] Fedora Core 4 Update: poppler-0.4.3-1.3. Here the announcement:



Fedora Update Notification
FEDORA-2005-1171
2005-12-19
---------------------------------------------------------------------

Product : Fedora Core 4
Name : poppler
Version : 0.4.3
Release : 1.3
Summary : PDF rendering library
Description :
Poppler, a PDF rendering library, it's a fork of the xpdf PDF
viewer developed by Derek Noonburg of Glyph and Cog, LLC.

---------------------------------------------------------------------
Update Information:

Several more flaws were discovered in Xpdf, which poppler is
based on. An attacker could construct a carefully crafted
PDF file that could cause poppler to crash or possibly
execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project assigned the name
CAN-2005-3193 to these issues.

---------------------------------------------------------------------
* Fri Dec 16 2005 Kristian Høgsberg <krh@redhat.com> 0.4.3-1.3
- Add remaining bits of CVS-2005-3191 fix.

* Tue Dec 13 2005 Kristian Høgsberg <krh@redhat.com> 0.4.3-1.2
- Add missing build requires.

* Mon Dec 12 2005 Kristian Høgsberg <krh@redhat.com> 0.4.3-1.1
- Update to 0.4.3.


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

dead2565946464bc75b95d71039c701c SRPMS/poppler-0.4.3-1.3.src.rpm
12ad1eb376b4517c18307fdaf1f15aec ppc/poppler-0.4.3-1.3.ppc.rpm
44b4f92350fde34b3df07a157e260cb8 ppc/poppler-devel-0.4.3-1.3.ppc.rpm
d3b02a1e7806eb457e8a915559b20036 ppc/debug/poppler-debuginfo-0.4.3-1.3.ppc.rpm
c174e6d62873770eaab179c46ef2f9d2 x86_64/poppler-0.4.3-1.3.x86_64.rpm
b95588155c8b7af41ba8017b6905d7e6 x86_64/poppler-devel-0.4.3-1.3.x86_64.rpm
e57f57990d9c996fad99dd2484f7d9be x86_64/debug/poppler-debuginfo-0.4.3-1.3.x86_64.rpm
e4dc688bfac95202607148a0615b0776 i386/poppler-0.4.3-1.3.i386.rpm
7a16f6b1d327bda409d750c13f606114 i386/poppler-devel-0.4.3-1.3.i386.rpm
014ce2b38ecd7ae84968385d801b7a87 i386/debug/poppler-debuginfo-0.4.3-1.3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.