kdegraphics security update

2007-07-3119:12:55

CentOS Project

lists.centos.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.1%

JSON

CentOS Errata and Security Advisory CESA-2007:0729

The kdegraphics packages contain applications for the K Desktop Environment
including kpdf, a PDF file viewer.

Maurycy Prodeus discovered an integer overflow flaw in the processing
of PDF files. An attacker could create a malicious PDF file that would
cause kpdf to crash or potentially execute arbitrary code when opened.
(CVE-2007-3387)

All users of kdegraphics should upgrade to these updated packages, which
contain a backported patch to resolve this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-August/076277.html
https://lists.centos.org/pipermail/centos-announce/2007-August/076281.html
https://lists.centos.org/pipermail/centos-announce/2007-August/076282.html
https://lists.centos.org/pipermail/centos-announce/2007-July/076257.html
https://lists.centos.org/pipermail/centos-announce/2007-July/076270.html
https://lists.centos.org/pipermail/centos-announce/2007-July/076271.html

Affected packages:
kdegraphics
kdegraphics-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0729

OSVersionArchitecturePackageVersionFilename
CentOS4ia64kdegraphics< 3.3.1-4.RHEL4kdegraphics-3.3.1-4.RHEL4.ia64.rpm
CentOS4ia64kdegraphics-devel< 3.3.1-4.RHEL4kdegraphics-devel-3.3.1-4.RHEL4.ia64.rpm
CentOS4x86_64kdegraphics< 3.3.1-4.RHEL4kdegraphics-3.3.1-4.RHEL4.x86_64.rpm
CentOS4x86_64kdegraphics-devel< 3.3.1-4.RHEL4kdegraphics-devel-3.3.1-4.RHEL4.x86_64.rpm
CentOS4i386kdegraphics< 3.3.1-4.RHEL4kdegraphics-3.3.1-4.RHEL4.i386.rpm
CentOS4i386kdegraphics-devel< 3.3.1-4.RHEL4kdegraphics-devel-3.3.1-4.RHEL4.i386.rpm
CentOS4s390kdegraphics< 3.3.1-4.RHEL4kdegraphics-3.3.1-4.RHEL4.s390.rpm
CentOS4s390kdegraphics-devel< 3.3.1-4.RHEL4kdegraphics-devel-3.3.1-4.RHEL4.s390.rpm
CentOS4s390xkdegraphics< 3.3.1-4.RHEL4kdegraphics-3.3.1-4.RHEL4.s390x.rpm
CentOS4s390xkdegraphics-devel< 3.3.1-4.RHEL4kdegraphics-devel-3.3.1-4.RHEL4.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	kdegraphics	< 3.3.1-4.RHEL4	kdegraphics-3.3.1-4.RHEL4.ia64.rpm
CentOS	4	ia64	kdegraphics-devel	< 3.3.1-4.RHEL4	kdegraphics-devel-3.3.1-4.RHEL4.ia64.rpm
CentOS	4	x86_64	kdegraphics	< 3.3.1-4.RHEL4	kdegraphics-3.3.1-4.RHEL4.x86_64.rpm
CentOS	4	x86_64	kdegraphics-devel	< 3.3.1-4.RHEL4	kdegraphics-devel-3.3.1-4.RHEL4.x86_64.rpm
CentOS	4	i386	kdegraphics	< 3.3.1-4.RHEL4	kdegraphics-3.3.1-4.RHEL4.i386.rpm
CentOS	4	i386	kdegraphics-devel	< 3.3.1-4.RHEL4	kdegraphics-devel-3.3.1-4.RHEL4.i386.rpm
CentOS	4	s390	kdegraphics	< 3.3.1-4.RHEL4	kdegraphics-3.3.1-4.RHEL4.s390.rpm
CentOS	4	s390	kdegraphics-devel	< 3.3.1-4.RHEL4	kdegraphics-devel-3.3.1-4.RHEL4.s390.rpm
CentOS	4	s390x	kdegraphics	< 3.3.1-4.RHEL4	kdegraphics-3.3.1-4.RHEL4.s390x.rpm
CentOS	4	s390x	kdegraphics-devel	< 3.3.1-4.RHEL4	kdegraphics-devel-3.3.1-4.RHEL4.s390x.rpm