Security Advisories (MDKSA-2005:052): kdegraphics

[aru]

Mandrakesoft Security Advisories MDKSA-2005:052 : kdegraphics

 

Updated kdegraphics packages fix vulnerabilities

March 4th, 2005

 

Previous updates to correct integer overflow issues affecting xpdf overlooked certain conditions when built for a 64 bit platform. (formerly CAN-2004-0888). This also affects applications like kdegraphics, that use embedded versions of xpdf. (CAN-2005-0206)

 

In addition, previous libtiff updates overlooked kdegraphics, which contains and embedded libtiff used for kfax. This update includes patches to address:CAN-2004-0803, CAN-2004-0804, CAN-2004-0886, CAN-2004-1183, CAN-2004-1308.

 

The updated packages are patched to deal with these issues.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 10.0
  
• 10.1
  
• CS3.0
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesoft.com/security/advisories?name=MDKSA-2005:052

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0206

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0803

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0804

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0886

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1183

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1308

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 0.11 2004/10/23 09:47:46 aru Exp aru $)