|
Mandrake update for Xpdf
|
|
Secunia Advisory:
|
SA9141
|
|
|
Release Date:
|
2003-06-30
|
|
Last Update:
|
2003-07-24
|
|
Popularity:
|
6,318 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Mandrake Corporate Server 2.x
Mandrake Linux 9.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0434
|
|
Description:
MandrakeSoft has issued updated packages for Xpdf. These fix a vulnerability, which potentially can be exploited by malicious people to compromise a user's system by luring the user into viewing a specially crafted PDF document.
For more information:
http://secunia.com/advisories/9037/
Solution:
Upgrade automatically using MandrakeUpdate or manually by downloading the updated packages from one of MandrakeSoft's FTP server mirrors:
http://www.mandrakesecure.net/en/ftp.php
Updated packages:
Corporate Server 2.1:
12939cf7ca98085acc4f6ba5d741a8c6 corporate/2.1/RPMS/xpdf-1.01-4.3mdk.i586.rpm
1a9bdf930d450c8b7f506d987805aa42 corporate/2.1/SRPMS/xpdf-1.01-4.3mdk.src.rpm
Corporate Server 2.1/x86_64:
5f22b8c7e2a03f4ad1d452b23348c967 x86_64/corporate/2.1/RPMS/xpdf-1.01-4.3mdk.x86_64.rpm
1a9bdf930d450c8b7f506d987805aa42 x86_64/corporate/2.1/SRPMS/xpdf-1.01-4.3mdk.src.rpm
Mandrake Linux 9.0:
12939cf7ca98085acc4f6ba5d741a8c6 9.0/RPMS/xpdf-1.01-4.3mdk.i586.rpm
1a9bdf930d450c8b7f506d987805aa42 9.0/SRPMS/xpdf-1.01-4.3mdk.src.rpm
Mandrake Linux 9.1:
6f95f03b679a5e834ce8e19f440ebeed 9.1/RPMS/xpdf-2.01-2.2mdk.i586.rpm
cfe1fa4745fd0ab9488bc7490ba8919e 9.1/SRPMS/xpdf-2.01-2.2mdk.src.rpm
Mandrake Linux 9.1/PPC:
e4648afe258244c0bb59ecc533478816 ppc/9.1/RPMS/xpdf-2.01-2.2mdk.ppc.rpm
cfe1fa4745fd0ab9488bc7490ba8919e ppc/9.1/SRPMS/xpdf-2.01-2.2mdk.src.rpm
Changelog:
2003-07-24: Updated with new packages because the previous packages didn't fix the vulnerability properly.
Original Advisory:
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:071
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
