Synopsis

gpdf security update

Type/Severity

Security Advisory: Important

Topic

An updated gpdf package that fixes two security issues is now available.

This update has been rated as having important security impact by the Red Hat
Security Response Team.

Description

GPdf is a viewer for Portable Document Format (PDF) files for GNOME.

A buffer overflow flaw was found in the Gfx::doImage function of Xpdf which
also affects GPdf due to a shared codebase. An attacker could construct a
carefully crafted PDF file that could cause GPdf to crash or possibly
execute arbitrary code when opened. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2004-1125 to
this issue.

A buffer overflow flaw was found in the Decrypt::makeFileKey2 function of
Xpdf which also affects GPdf due to a shared codebase. An attacker could
construct a carefully crafted PDF file that could cause GPdf to crash or
possibly execute arbitrary code when opened. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2005-0064 to
this issue.

During a source code audit, Chris Evans and others discovered a number of
integer overflow bugs that affected all versions of Xpdf, which also
affects GPdf due to a shared codebase. An attacker could construct a
carefully crafted PDF file that could cause GPdf to crash or possibly
execute arbitrary code when opened. This issue was assigned the name
CAN-2004-0888 by The Common Vulnerabilities and Exposures project
(cve.mitre.org). Red Hat Enterprise Linux 4 contained a fix for this issue,
but it was found to be incomplete and left 64-bit architectures vulnerable.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0206 to this issue.

Users should update to this erratum package which contains backported
patches to correct these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 144210 - CAN-2004-1125 gpdf buffer overflow
• BZ - 145054 - CAN-2005-0064 xpdf buffer overflow
• BZ - 147518 - CAN-2004-0888 xpdf integer overflows

CVEs

• CVE-2004-1125
• CVE-2005-0206
• CVE-2005-0064

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
gpdf-2.8.2-4.3.src.rpm	SHA-256: 98977e83c40131c0f728c0c1192b7f982a4565b1fb904158d1a7b9d9c068ae59
x86_64
gpdf-2.8.2-4.3.x86_64.rpm	SHA-256: bd1fa1e556a0a17bc935eaa9e5545cd06efee77203d393aad4f77e7a832e8970
gpdf-2.8.2-4.3.x86_64.rpm	SHA-256: bd1fa1e556a0a17bc935eaa9e5545cd06efee77203d393aad4f77e7a832e8970
ia64
gpdf-2.8.2-4.3.ia64.rpm	SHA-256: 68802c8576aa4485ba3af84f4c98366d8c24c3aa454211aee240ba7c9256fd69
gpdf-2.8.2-4.3.ia64.rpm	SHA-256: 68802c8576aa4485ba3af84f4c98366d8c24c3aa454211aee240ba7c9256fd69
i386
gpdf-2.8.2-4.3.i386.rpm	SHA-256: cf8a334989b695df352fc9323aaf7e77d371253d30706793e34f7213cbf6a109
gpdf-2.8.2-4.3.i386.rpm	SHA-256: cf8a334989b695df352fc9323aaf7e77d371253d30706793e34f7213cbf6a109

Red Hat Enterprise Linux Workstation 4

SRPM
gpdf-2.8.2-4.3.src.rpm	SHA-256: 98977e83c40131c0f728c0c1192b7f982a4565b1fb904158d1a7b9d9c068ae59
x86_64
gpdf-2.8.2-4.3.x86_64.rpm	SHA-256: bd1fa1e556a0a17bc935eaa9e5545cd06efee77203d393aad4f77e7a832e8970
ia64
gpdf-2.8.2-4.3.ia64.rpm	SHA-256: 68802c8576aa4485ba3af84f4c98366d8c24c3aa454211aee240ba7c9256fd69
i386
gpdf-2.8.2-4.3.i386.rpm	SHA-256: cf8a334989b695df352fc9323aaf7e77d371253d30706793e34f7213cbf6a109

Red Hat Enterprise Linux Desktop 4

SRPM
gpdf-2.8.2-4.3.src.rpm	SHA-256: 98977e83c40131c0f728c0c1192b7f982a4565b1fb904158d1a7b9d9c068ae59
x86_64
gpdf-2.8.2-4.3.x86_64.rpm	SHA-256: bd1fa1e556a0a17bc935eaa9e5545cd06efee77203d393aad4f77e7a832e8970
i386
gpdf-2.8.2-4.3.i386.rpm	SHA-256: cf8a334989b695df352fc9323aaf7e77d371253d30706793e34f7213cbf6a109

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
gpdf-2.8.2-4.3.src.rpm	SHA-256: 98977e83c40131c0f728c0c1192b7f982a4565b1fb904158d1a7b9d9c068ae59
s390x
gpdf-2.8.2-4.3.s390x.rpm	SHA-256: 9053bc4c43ec20cabc6f1d074e28e9b8094a53f020e67f6605308d2c2127fc21
s390
gpdf-2.8.2-4.3.s390.rpm	SHA-256: 63c8493c8eebc14b30ca4848a3738f9c8488f39e4657def1602dda5c144705bc

Red Hat Enterprise Linux for Power, big endian 4

SRPM
gpdf-2.8.2-4.3.src.rpm	SHA-256: 98977e83c40131c0f728c0c1192b7f982a4565b1fb904158d1a7b9d9c068ae59
ppc
gpdf-2.8.2-4.3.ppc.rpm	SHA-256: c822e4f4c09f038fb905785dd25e78b98ef1d62acdaa32cf35be7edb2e6ba0ef