198409 2007-11-07 23:50 0000 app-office/{koffice,kword}, kde-base/{kdegraphics,kpdf} Multiple XPDF issues (CVE-2007-{4352,5392,5393}) 2008-03-06 09:47:24 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://www.kde.org/info/security/advisory-20071107-1.txt B2 [glsa] P2 normal --- 196735 1 rbu@gentoo.org security@gentoo.org kde@gentoo.org mips@gentoo.org rbu@gentoo.org 2007-11-07 23:50:50 0000 Multiple issues in XPDF, which our four KDE packages bundle. See bug 196735 for details. KDE, please advise. Any word from upstream? rbu@gentoo.org 2007-11-09 10:37:55 0000 The patches are linked from the KDE advisory in $URL. philantrop@gentoo.org 2007-11-11 19:11:07 0000 This is fixed in the following packages that require no further work: kde-base/kpdf-3.5.8-r1 kde-base/kdegraphics-3.5.8-r1 These four packages are fixed, too, but need to be stabilised: kde-base/kpdf-3.5.7-r3 kde-base/kdegraphics-3.5.7-r3 app-office/kword-1.6.3-r2 app-office/koffice-1.6.3-r2 rbu@gentoo.org 2007-11-11 20:01:48 0000 Arches, please test and mark stable kde-base/kpdf-3.5.7-r2: Target keywords : "alpha amd64 ia64 ppc ppc64 sparc x86" kde-base/kdegraphics-3.5.7-r3: Target keywords : "alpha amd64 hppa ia64 mips ppc ppc64 sparc x86" app-office/kword-1.6.3-r2: Target keywords : "alpha amd64 hppa ia64 ppc ppc64 sparc x86" app-office/koffice-1.6.3-r2: Target keywords : "alpha amd64 hppa ia64 ppc ppc64 sparc x86" philantrop@gentoo.org 2007-11-11 21:47:13 0000 It's kde-base/kpdf-3.5.7-r3, *not* -r2. :-) Marked all four stable on amd64. fauli@gentoo.org 2007-11-12 14:08:16 0000 (In reply to comment #3) > Arches, please test and mark stable kde-base/kpdf-3.5.7-r2: > app-office/kword-1.6.3-r2: > Target keywords : "alpha amd64 hppa ia64 ppc ppc64 sparc x86" Done on x86, rest for someone else. jer@gentoo.org 2007-11-12 19:25:18 0000 Stable for HPPA. corsair@gentoo.org 2007-11-12 19:33:17 0000 ppc64 stable cla@gentoo.org 2007-11-13 16:49:19 0000 koffice done on x86 armin76@gentoo.org 2007-11-13 17:35:00 0000 alpha/ia64/sparc stable maekke@gentoo.org 2007-11-13 23:46:13 0000 kdegraphics stable on x86, we are out. dertobi123@gentoo.org 2007-11-18 08:59:18 0000 ppc stable py@gentoo.org 2007-11-18 21:01:05 0000 GLSA 200711-22 pva@gentoo.org 2008-03-06 09:47:24 0000 Does not affect current (2008.0) release. Removing release.