Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 121375 - kde-base/{kdegraphics|kpdf} xpdf heap based buffer overflow (CVE-2006-0301)
Summary: kde-base/{kdegraphics|kpdf} xpdf heap based buffer overflow (CVE-2006-0301)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Security
URL:
Whiteboard: B2 [glsa] jaervosz
Keywords:
Depends on:
Blocks:
 
Reported: 2006-02-02 16:52 UTC by Carsten Lohrke (RETIRED)
Modified: 2019-12-19 00:38 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Carsten Lohrke (RETIRED) gentoo-dev 2006-02-02 16:52:45 UTC 
See also bug 120985.
Comment 1 Carsten Lohrke (RETIRED) gentoo-dev 2006-02-02 17:02:25 UTC 
<<< kpdf-3.4.3-r4.ebuild
<<< kdegraphics-3.4.3-r4.ebuild

Arch herds, please test and stabilize. Thanks.
Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-02-02 22:40:37 UTC 
Thx Carlo.
Comment 3 Jason Wever (RETIRED) gentoo-dev 2006-02-03 05:44:36 UTC 
Keep on SPARCin'
Comment 4 Markus Rothe (RETIRED) gentoo-dev 2006-02-03 12:02:35 UTC 
stable on ppc64
Comment 5 Jose Luis Rivero (yoswink) (RETIRED) gentoo-dev 2006-02-04 07:24:12 UTC 
stable on alpha
Comment 6 Tobias Scherbaum (RETIRED) gentoo-dev 2006-02-05 11:27:30 UTC 
<<< kpdf-3.4.3-r4.ebuild
<<< kdegraphics-3.4.3-r4.ebuild

ppc stable.
Comment 7 Joshua Jackson (RETIRED) gentoo-dev 2006-02-06 20:22:27 UTC 
x86 stable
Comment 8 René Nussbaumer (RETIRED) gentoo-dev 2006-02-07 04:07:51 UTC 
Allready done. Remove from CC. Thanks to GMSoft.
Comment 9 Benjamin Schindler (RETIRED) gentoo-dev 2006-02-10 09:27:24 UTC 
amd64 stable
Comment 10 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-02-10 09:33:32 UTC 
Does kword still use XPDF code, if so we need to get that patched also?
Comment 11 Carsten Lohrke (RETIRED) gentoo-dev 2006-02-11 12:06:40 UTC 
(In reply to comment #10)
> Does kword still use XPDF code, if so we need to get that patched also?
> 

Yes it does, but only for importing pdf files and therefore KWord is not affected in this case.
Comment 12 Thierry Carrez (RETIRED) gentoo-dev 2006-02-12 10:24:54 UTC 
GLSA 200602-05
ia64 and mips should mark stable to benefit from GLSA