Red Hat Product Errata RHSA-2009:1682 - Security Advisory
Issued:
2009-12-16
Updated:
2009-12-16

RHSA-2009:1682 - Security Advisory

Synopsis

Important: kdegraphics security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated kdegraphics packages that fix a security issue are now available
for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The kdegraphics packages contain applications for the K Desktop
Environment, including KPDF, a viewer for Portable Document Format (PDF)
files.

Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw
in KPDF's Type 1 font parser. A specially-crafted PDF file with an embedded
Type 1 font could cause KPDF to crash or, possibly, execute arbitrary code
when opened. (CVE-2009-4035)

Users are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8 ppc

Fixes

  • BZ - 541614 - CVE-2009-4035 xpdf: buffer overflow in FoFiType1::parse

Red Hat Enterprise Linux Server 4

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
x86_64
kdegraphics-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 805daca1cfa26275e7c3f1d2f68f51535a4d15cd76c07a024a899117318e01e4
kdegraphics-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 805daca1cfa26275e7c3f1d2f68f51535a4d15cd76c07a024a899117318e01e4
kdegraphics-devel-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 128e5a7d14280a3b3b7447c07a0b55215a95d2c9f0575526de6cdb5fe51eb51c
kdegraphics-devel-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 128e5a7d14280a3b3b7447c07a0b55215a95d2c9f0575526de6cdb5fe51eb51c
ia64
kdegraphics-3.3.1-17.el4_8.1.ia64.rpm SHA-256: 4936c01569e35ad47b3cb317334ef36179df2170bc1243144f07e2d831681095
kdegraphics-3.3.1-17.el4_8.1.ia64.rpm SHA-256: 4936c01569e35ad47b3cb317334ef36179df2170bc1243144f07e2d831681095
kdegraphics-devel-3.3.1-17.el4_8.1.ia64.rpm SHA-256: f6143a333ea8509c43922a43602198e94991169f9bb932874221b47bc0e45ca6
kdegraphics-devel-3.3.1-17.el4_8.1.ia64.rpm SHA-256: f6143a333ea8509c43922a43602198e94991169f9bb932874221b47bc0e45ca6
i386
kdegraphics-3.3.1-17.el4_8.1.i386.rpm SHA-256: 9fee9e0f1863105dce951f1eb762c0e77a4f418c8f36e6b9e782310bca19bda8
kdegraphics-3.3.1-17.el4_8.1.i386.rpm SHA-256: 9fee9e0f1863105dce951f1eb762c0e77a4f418c8f36e6b9e782310bca19bda8
kdegraphics-devel-3.3.1-17.el4_8.1.i386.rpm SHA-256: 7d6a8337d00f5fa7322c04d6c4eaa7746a75f682fb0b6d9daf3e13f84bdcca5b
kdegraphics-devel-3.3.1-17.el4_8.1.i386.rpm SHA-256: 7d6a8337d00f5fa7322c04d6c4eaa7746a75f682fb0b6d9daf3e13f84bdcca5b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
x86_64
kdegraphics-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 805daca1cfa26275e7c3f1d2f68f51535a4d15cd76c07a024a899117318e01e4
kdegraphics-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 805daca1cfa26275e7c3f1d2f68f51535a4d15cd76c07a024a899117318e01e4
kdegraphics-devel-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 128e5a7d14280a3b3b7447c07a0b55215a95d2c9f0575526de6cdb5fe51eb51c
kdegraphics-devel-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 128e5a7d14280a3b3b7447c07a0b55215a95d2c9f0575526de6cdb5fe51eb51c
ia64
kdegraphics-3.3.1-17.el4_8.1.ia64.rpm SHA-256: 4936c01569e35ad47b3cb317334ef36179df2170bc1243144f07e2d831681095
kdegraphics-3.3.1-17.el4_8.1.ia64.rpm SHA-256: 4936c01569e35ad47b3cb317334ef36179df2170bc1243144f07e2d831681095
kdegraphics-devel-3.3.1-17.el4_8.1.ia64.rpm SHA-256: f6143a333ea8509c43922a43602198e94991169f9bb932874221b47bc0e45ca6
kdegraphics-devel-3.3.1-17.el4_8.1.ia64.rpm SHA-256: f6143a333ea8509c43922a43602198e94991169f9bb932874221b47bc0e45ca6
i386
kdegraphics-3.3.1-17.el4_8.1.i386.rpm SHA-256: 9fee9e0f1863105dce951f1eb762c0e77a4f418c8f36e6b9e782310bca19bda8
kdegraphics-3.3.1-17.el4_8.1.i386.rpm SHA-256: 9fee9e0f1863105dce951f1eb762c0e77a4f418c8f36e6b9e782310bca19bda8
kdegraphics-devel-3.3.1-17.el4_8.1.i386.rpm SHA-256: 7d6a8337d00f5fa7322c04d6c4eaa7746a75f682fb0b6d9daf3e13f84bdcca5b
kdegraphics-devel-3.3.1-17.el4_8.1.i386.rpm SHA-256: 7d6a8337d00f5fa7322c04d6c4eaa7746a75f682fb0b6d9daf3e13f84bdcca5b

Red Hat Enterprise Linux Workstation 4

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
x86_64
kdegraphics-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 805daca1cfa26275e7c3f1d2f68f51535a4d15cd76c07a024a899117318e01e4
kdegraphics-devel-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 128e5a7d14280a3b3b7447c07a0b55215a95d2c9f0575526de6cdb5fe51eb51c
ia64
kdegraphics-3.3.1-17.el4_8.1.ia64.rpm SHA-256: 4936c01569e35ad47b3cb317334ef36179df2170bc1243144f07e2d831681095
kdegraphics-devel-3.3.1-17.el4_8.1.ia64.rpm SHA-256: f6143a333ea8509c43922a43602198e94991169f9bb932874221b47bc0e45ca6
i386
kdegraphics-3.3.1-17.el4_8.1.i386.rpm SHA-256: 9fee9e0f1863105dce951f1eb762c0e77a4f418c8f36e6b9e782310bca19bda8
kdegraphics-devel-3.3.1-17.el4_8.1.i386.rpm SHA-256: 7d6a8337d00f5fa7322c04d6c4eaa7746a75f682fb0b6d9daf3e13f84bdcca5b

Red Hat Enterprise Linux Desktop 4

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
x86_64
kdegraphics-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 805daca1cfa26275e7c3f1d2f68f51535a4d15cd76c07a024a899117318e01e4
kdegraphics-devel-3.3.1-17.el4_8.1.x86_64.rpm SHA-256: 128e5a7d14280a3b3b7447c07a0b55215a95d2c9f0575526de6cdb5fe51eb51c
i386
kdegraphics-3.3.1-17.el4_8.1.i386.rpm SHA-256: 9fee9e0f1863105dce951f1eb762c0e77a4f418c8f36e6b9e782310bca19bda8
kdegraphics-devel-3.3.1-17.el4_8.1.i386.rpm SHA-256: 7d6a8337d00f5fa7322c04d6c4eaa7746a75f682fb0b6d9daf3e13f84bdcca5b

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
s390x
kdegraphics-3.3.1-17.el4_8.1.s390x.rpm SHA-256: 9d5a1aafb7566b9ef22063e186a630170db51cb4ce9579117f8f603d06a2daa9
kdegraphics-devel-3.3.1-17.el4_8.1.s390x.rpm SHA-256: 49fa16c68ee3cef784f2c484353327ecb89ace6fbb6e4fe4a6aa3516d07f0a41
s390
kdegraphics-3.3.1-17.el4_8.1.s390.rpm SHA-256: aeb86ba73bb6251948d66da609e111e5e6fb2b042fcb73865c5d64dc799e13aa
kdegraphics-devel-3.3.1-17.el4_8.1.s390.rpm SHA-256: 71b725cfa5d6861098a7f556d0b7b4c0c8f655e98f33d1d79017075dea9f710d

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
s390x
kdegraphics-3.3.1-17.el4_8.1.s390x.rpm SHA-256: 9d5a1aafb7566b9ef22063e186a630170db51cb4ce9579117f8f603d06a2daa9
kdegraphics-devel-3.3.1-17.el4_8.1.s390x.rpm SHA-256: 49fa16c68ee3cef784f2c484353327ecb89ace6fbb6e4fe4a6aa3516d07f0a41
s390
kdegraphics-3.3.1-17.el4_8.1.s390.rpm SHA-256: aeb86ba73bb6251948d66da609e111e5e6fb2b042fcb73865c5d64dc799e13aa
kdegraphics-devel-3.3.1-17.el4_8.1.s390.rpm SHA-256: 71b725cfa5d6861098a7f556d0b7b4c0c8f655e98f33d1d79017075dea9f710d

Red Hat Enterprise Linux for Power, big endian 4

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
ppc
kdegraphics-3.3.1-17.el4_8.1.ppc.rpm SHA-256: 3701976b859364e23e1d0cc2b3b7d7b27afa8428759083b8a7f800dafdaa9ead
kdegraphics-devel-3.3.1-17.el4_8.1.ppc.rpm SHA-256: 7078aa756a7f25f493d0f7f6be368af7b95cccfcd457e5cb04be6585e67f7c85

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8

SRPM
kdegraphics-3.3.1-17.el4_8.1.src.rpm SHA-256: c32ef43fe8b8f653ecdc077e89c2eec9256d7b1ece8b2c8de5da1e974da30702
ppc
kdegraphics-3.3.1-17.el4_8.1.ppc.rpm SHA-256: 3701976b859364e23e1d0cc2b3b7d7b27afa8428759083b8a7f800dafdaa9ead
kdegraphics-devel-3.3.1-17.el4_8.1.ppc.rpm SHA-256: 7078aa756a7f25f493d0f7f6be368af7b95cccfcd457e5cb04be6585e67f7c85

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.