Bug 137420

Summary:	CAN-2004-0888 multiple xpdf integer overflows
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	gpdf	Assignee:	Dan Williams <dcbw>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	2	CC:	mjc
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2004-10-28 16:33:10 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2004-10-28 13:03:23 UTC

A number of integer overflows have been found in xpdf.  gpdf uses xpdf
as its core for displaying pdf files.

See bug 135393 for the demo pdf files and the patch.

We should try to ensure this is fixed in FC3.

Comment 1 Dan Williams 2004-10-28 13:39:22 UTC

Buidling gpdf-2.8.0-5 that has this fix into
dist-fc3-updates-candidate.  Fix has been merged to devel and RHEL-4
CVS branches as well.

Comment 2 Dan Williams 2004-10-28 14:22:07 UTC

gpdf-2.8.0-5 is signed and moved to dist-fc3

Comment 3 Dan Williams 2004-10-28 16:20:50 UTC

building gpdf-2.8.0-4.1.fc2 into dist-fc2-updates-candidate with this fix

Comment 4 Dan Williams 2004-10-28 16:33:10 UTC

gpdf-2.8.0-4.1.fc2 signed and pushed to fc2 updates.

Comment 5 Dan Williams 2004-10-28 16:38:01 UTC

Upstream gnome.org bug for this issue is:

http://bugzilla.gnome.org/show_bug.cgi?id=156729