Issued:
2008-04-17
Updated:
2008-04-17

RHSA-2008:0238 - Security Advisory

Synopsis

Important: kdegraphics security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated kdegraphics packages that fix a security issue are now available
for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The kdegraphics packages contain applications for the K Desktop
Environment, including kpdf, a PDF file viewer.

Kees Cook discovered a flaw in the way kpdf displayed malformed fonts
embedded in PDF files. An attacker could create a malicious PDF file that
would cause kpdf to crash, or, potentially, execute arbitrary code when
opened. (CVE-2008-1693)

All kdegraphics users are advised to upgrade to these updated packages,
which contain backported patches to resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6 ppc

Fixes

(none)

Red Hat Enterprise Linux Server 4

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
x86_64
kdegraphics-3.3.1-9.el4_6.x86_64.rpm SHA-256: 648bc4a6f7a1f7e6137d59a36ab9048c977861b5db9a4dfbcec2f9554e260938
kdegraphics-3.3.1-9.el4_6.x86_64.rpm SHA-256: 648bc4a6f7a1f7e6137d59a36ab9048c977861b5db9a4dfbcec2f9554e260938
kdegraphics-devel-3.3.1-9.el4_6.x86_64.rpm SHA-256: 11d6211dfeba7f2375d0311ae4e83f6c2165040674f831e4a9e9ab5b1342ad6a
kdegraphics-devel-3.3.1-9.el4_6.x86_64.rpm SHA-256: 11d6211dfeba7f2375d0311ae4e83f6c2165040674f831e4a9e9ab5b1342ad6a
ia64
kdegraphics-3.3.1-9.el4_6.ia64.rpm SHA-256: 8ea6ce5c34403dfcdcd79687d9fc085fa4bb3a94617296f2171f058637eb6b29
kdegraphics-3.3.1-9.el4_6.ia64.rpm SHA-256: 8ea6ce5c34403dfcdcd79687d9fc085fa4bb3a94617296f2171f058637eb6b29
kdegraphics-devel-3.3.1-9.el4_6.ia64.rpm SHA-256: 72c76a6ae97bea6f0a4c4140548ffdf8609290a8e78a3050ee16201aaa814105
kdegraphics-devel-3.3.1-9.el4_6.ia64.rpm SHA-256: 72c76a6ae97bea6f0a4c4140548ffdf8609290a8e78a3050ee16201aaa814105
i386
kdegraphics-3.3.1-9.el4_6.i386.rpm SHA-256: 2fe5522af6a223b091a7cff54e5aa888fefe0475cb592b683598bc038563d1cf
kdegraphics-3.3.1-9.el4_6.i386.rpm SHA-256: 2fe5522af6a223b091a7cff54e5aa888fefe0475cb592b683598bc038563d1cf
kdegraphics-devel-3.3.1-9.el4_6.i386.rpm SHA-256: 471fe7b5a96232d225f2dc06b3368a143441323e7400f823bf8619e0fddf4a9d
kdegraphics-devel-3.3.1-9.el4_6.i386.rpm SHA-256: 471fe7b5a96232d225f2dc06b3368a143441323e7400f823bf8619e0fddf4a9d

Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
x86_64
kdegraphics-3.3.1-9.el4_6.x86_64.rpm SHA-256: 648bc4a6f7a1f7e6137d59a36ab9048c977861b5db9a4dfbcec2f9554e260938
kdegraphics-3.3.1-9.el4_6.x86_64.rpm SHA-256: 648bc4a6f7a1f7e6137d59a36ab9048c977861b5db9a4dfbcec2f9554e260938
kdegraphics-devel-3.3.1-9.el4_6.x86_64.rpm SHA-256: 11d6211dfeba7f2375d0311ae4e83f6c2165040674f831e4a9e9ab5b1342ad6a
kdegraphics-devel-3.3.1-9.el4_6.x86_64.rpm SHA-256: 11d6211dfeba7f2375d0311ae4e83f6c2165040674f831e4a9e9ab5b1342ad6a
ia64
kdegraphics-3.3.1-9.el4_6.ia64.rpm SHA-256: 8ea6ce5c34403dfcdcd79687d9fc085fa4bb3a94617296f2171f058637eb6b29
kdegraphics-3.3.1-9.el4_6.ia64.rpm SHA-256: 8ea6ce5c34403dfcdcd79687d9fc085fa4bb3a94617296f2171f058637eb6b29
kdegraphics-devel-3.3.1-9.el4_6.ia64.rpm SHA-256: 72c76a6ae97bea6f0a4c4140548ffdf8609290a8e78a3050ee16201aaa814105
kdegraphics-devel-3.3.1-9.el4_6.ia64.rpm SHA-256: 72c76a6ae97bea6f0a4c4140548ffdf8609290a8e78a3050ee16201aaa814105
i386
kdegraphics-3.3.1-9.el4_6.i386.rpm SHA-256: 2fe5522af6a223b091a7cff54e5aa888fefe0475cb592b683598bc038563d1cf
kdegraphics-3.3.1-9.el4_6.i386.rpm SHA-256: 2fe5522af6a223b091a7cff54e5aa888fefe0475cb592b683598bc038563d1cf
kdegraphics-devel-3.3.1-9.el4_6.i386.rpm SHA-256: 471fe7b5a96232d225f2dc06b3368a143441323e7400f823bf8619e0fddf4a9d
kdegraphics-devel-3.3.1-9.el4_6.i386.rpm SHA-256: 471fe7b5a96232d225f2dc06b3368a143441323e7400f823bf8619e0fddf4a9d

Red Hat Enterprise Linux Workstation 4

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
x86_64
kdegraphics-3.3.1-9.el4_6.x86_64.rpm SHA-256: 648bc4a6f7a1f7e6137d59a36ab9048c977861b5db9a4dfbcec2f9554e260938
kdegraphics-devel-3.3.1-9.el4_6.x86_64.rpm SHA-256: 11d6211dfeba7f2375d0311ae4e83f6c2165040674f831e4a9e9ab5b1342ad6a
ia64
kdegraphics-3.3.1-9.el4_6.ia64.rpm SHA-256: 8ea6ce5c34403dfcdcd79687d9fc085fa4bb3a94617296f2171f058637eb6b29
kdegraphics-devel-3.3.1-9.el4_6.ia64.rpm SHA-256: 72c76a6ae97bea6f0a4c4140548ffdf8609290a8e78a3050ee16201aaa814105
i386
kdegraphics-3.3.1-9.el4_6.i386.rpm SHA-256: 2fe5522af6a223b091a7cff54e5aa888fefe0475cb592b683598bc038563d1cf
kdegraphics-devel-3.3.1-9.el4_6.i386.rpm SHA-256: 471fe7b5a96232d225f2dc06b3368a143441323e7400f823bf8619e0fddf4a9d

Red Hat Enterprise Linux Desktop 4

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
x86_64
kdegraphics-3.3.1-9.el4_6.x86_64.rpm SHA-256: 648bc4a6f7a1f7e6137d59a36ab9048c977861b5db9a4dfbcec2f9554e260938
kdegraphics-devel-3.3.1-9.el4_6.x86_64.rpm SHA-256: 11d6211dfeba7f2375d0311ae4e83f6c2165040674f831e4a9e9ab5b1342ad6a
i386
kdegraphics-3.3.1-9.el4_6.i386.rpm SHA-256: 2fe5522af6a223b091a7cff54e5aa888fefe0475cb592b683598bc038563d1cf
kdegraphics-devel-3.3.1-9.el4_6.i386.rpm SHA-256: 471fe7b5a96232d225f2dc06b3368a143441323e7400f823bf8619e0fddf4a9d

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
s390x
kdegraphics-3.3.1-9.el4_6.s390x.rpm SHA-256: e4ce51fcce8cc64f362ed8d0b7a72d0999afae66839057a811750539c585cec7
kdegraphics-devel-3.3.1-9.el4_6.s390x.rpm SHA-256: 6beb3abd0b47bcfc8cc18995f5af8e7c6b8bc2b694dc8f62eff20293ca167fd3
s390
kdegraphics-3.3.1-9.el4_6.s390.rpm SHA-256: ffc5eba9dc99ee46f6e97978f238f48497669e2c1c812b444dc659297c553acc
kdegraphics-devel-3.3.1-9.el4_6.s390.rpm SHA-256: 21496dad62d7322358e4ca95acb6819c3b4606f0e101df969999fa29c60a2c74

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
s390x
kdegraphics-3.3.1-9.el4_6.s390x.rpm SHA-256: e4ce51fcce8cc64f362ed8d0b7a72d0999afae66839057a811750539c585cec7
kdegraphics-devel-3.3.1-9.el4_6.s390x.rpm SHA-256: 6beb3abd0b47bcfc8cc18995f5af8e7c6b8bc2b694dc8f62eff20293ca167fd3
s390
kdegraphics-3.3.1-9.el4_6.s390.rpm SHA-256: ffc5eba9dc99ee46f6e97978f238f48497669e2c1c812b444dc659297c553acc
kdegraphics-devel-3.3.1-9.el4_6.s390.rpm SHA-256: 21496dad62d7322358e4ca95acb6819c3b4606f0e101df969999fa29c60a2c74

Red Hat Enterprise Linux for Power, big endian 4

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
ppc
kdegraphics-3.3.1-9.el4_6.ppc.rpm SHA-256: e505bbb43e0e4390c67c395d7bc7513923b06ccbec7bac5b07dac2e69714393c
kdegraphics-devel-3.3.1-9.el4_6.ppc.rpm SHA-256: dcf629366209d67ddc999b5213242fecd0c2bc3ff238fbcd933553eb8a6d0981

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6

SRPM
kdegraphics-3.3.1-9.el4_6.src.rpm SHA-256: abe227e8e3aebcf3c93423392780e712f8d6189a7958e065c13c1c3b4eea2045
ppc
kdegraphics-3.3.1-9.el4_6.ppc.rpm SHA-256: e505bbb43e0e4390c67c395d7bc7513923b06ccbec7bac5b07dac2e69714393c
kdegraphics-devel-3.3.1-9.el4_6.ppc.rpm SHA-256: dcf629366209d67ddc999b5213242fecd0c2bc3ff238fbcd933553eb8a6d0981

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.