Synopsis

xpdf security update

Type/Severity

Security Advisory: Moderate

Topic

An updated xpdf package that fixes a security issue is now available for
Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The xpdf package is an X Window System-based viewer for Portable Document
Format (PDF) files.

A flaw was discovered in Xpdf in that an attacker could construct a
carefully crafted PDF file that would cause Xpdf to consume all available
disk space in /tmp when opened. The Common Vulnerabilities and Exposures
project assigned the name CAN-2005-2097 to this issue.

Note this issue does not affect the version of Xpdf in Red Hat Enterprise
Linux 3 or 2.1.

Users of xpdf should upgrade to this updated package, which contains a
backported patch to resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 163918 - CAN-2005-2097 xpdf DoS

CVEs

• CVE-2005-2097

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
xpdf-3.00-11.8.src.rpm	SHA-256: be629cf395c4d86fafd8179a748aec4654559ef29f92b1716a96e21aad0b0e05
x86_64
xpdf-3.00-11.8.x86_64.rpm	SHA-256: 06d56d3b6f21a75654c149bcf35d1174aae0d8fc11aed5b27de06a0a04d5f864
xpdf-3.00-11.8.x86_64.rpm	SHA-256: 06d56d3b6f21a75654c149bcf35d1174aae0d8fc11aed5b27de06a0a04d5f864
ia64
xpdf-3.00-11.8.ia64.rpm	SHA-256: b7a6b2afd8751fbc609839563e7b6dbfb33f7fbaaba307f7acf8a19bdd582150
xpdf-3.00-11.8.ia64.rpm	SHA-256: b7a6b2afd8751fbc609839563e7b6dbfb33f7fbaaba307f7acf8a19bdd582150
i386
xpdf-3.00-11.8.i386.rpm	SHA-256: 8ed280c79a60599e9d13a6a9ee0408687fe019e1641d69c51195fb7e9129ba3e
xpdf-3.00-11.8.i386.rpm	SHA-256: 8ed280c79a60599e9d13a6a9ee0408687fe019e1641d69c51195fb7e9129ba3e

Red Hat Enterprise Linux Workstation 4

SRPM
xpdf-3.00-11.8.src.rpm	SHA-256: be629cf395c4d86fafd8179a748aec4654559ef29f92b1716a96e21aad0b0e05
x86_64
xpdf-3.00-11.8.x86_64.rpm	SHA-256: 06d56d3b6f21a75654c149bcf35d1174aae0d8fc11aed5b27de06a0a04d5f864
ia64
xpdf-3.00-11.8.ia64.rpm	SHA-256: b7a6b2afd8751fbc609839563e7b6dbfb33f7fbaaba307f7acf8a19bdd582150
i386
xpdf-3.00-11.8.i386.rpm	SHA-256: 8ed280c79a60599e9d13a6a9ee0408687fe019e1641d69c51195fb7e9129ba3e

Red Hat Enterprise Linux Desktop 4

SRPM
xpdf-3.00-11.8.src.rpm	SHA-256: be629cf395c4d86fafd8179a748aec4654559ef29f92b1716a96e21aad0b0e05
x86_64
xpdf-3.00-11.8.x86_64.rpm	SHA-256: 06d56d3b6f21a75654c149bcf35d1174aae0d8fc11aed5b27de06a0a04d5f864
i386
xpdf-3.00-11.8.i386.rpm	SHA-256: 8ed280c79a60599e9d13a6a9ee0408687fe019e1641d69c51195fb7e9129ba3e

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
xpdf-3.00-11.8.src.rpm	SHA-256: be629cf395c4d86fafd8179a748aec4654559ef29f92b1716a96e21aad0b0e05
s390x
xpdf-3.00-11.8.s390x.rpm	SHA-256: 2b983b34062dd33201dd30175493d7ce2f411f4cb125f0ccae82ec7e82a0329b
s390
xpdf-3.00-11.8.s390.rpm	SHA-256: 5be9a8b170a5b0894f6985cff9d6cc69251449c8df7f958263dadbbb2633cb61

Red Hat Enterprise Linux for Power, big endian 4

SRPM
xpdf-3.00-11.8.src.rpm	SHA-256: be629cf395c4d86fafd8179a748aec4654559ef29f92b1716a96e21aad0b0e05
ppc
xpdf-3.00-11.8.ppc.rpm	SHA-256: ef362b2f3bba3f574b94e41e5b688030c1c6327398bb896c053ea786efeabba2