Security advisory: xpdf (CVE-2005-3624/25/26/27)

Yaakov S (Cygwin Ports) yselkowitz@users.sourceforge.net
Tue Jan 31 03:04:00 GMT 2006


Xpdf is vulnerable to integer overflows that may be exploited to execute 
arbitrary code.

Solution: apply this patch to xpdf-3.01:
http://www.gentoo.org/cgi-bin/viewcvs.cgi/*checkout*/app-text/xpdf/files/xpdf-3.01-sec-rollup.patch

More information:
http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml


Yaakov



More information about the Cygwin-apps mailing list