[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    www/sites/www/info
From:       Dirk Mueller <mueller () kde ! org>
Date:       2006-02-02 23:10:29
Message-ID: 1138921829.349761.17169.nullmailer () svn ! kde ! org
[Download RAW message or body]

SVN commit 505065 by mueller:

next round of xpdf advisories ;/


 M  +8 -0      3.4.1.php  
 M  +8 -0      3.4.2.php  
 M  +8 -0      3.4.3.php  
 M  +6 -3      3.4.php  
 M  +9 -1      3.5.1.php  
 M  +9 -0      3.5.php  
 A             security/advisory-20060202-1.txt  
 M  +1 -0      security/index.php  


--- trunk/www/sites/www/info/3.4.1.php #505064:505065
@@ -59,9 +59,17 @@
 </li>
 
 
+<li>
+kpdf contains a buffer overflow in its xpdf-based code which can be triggered 
+by a specially crafted pdf file.
+<br />Read the <a href="security/advisory-20060202-1.txt">detailed advisory</a>.
+All versions of KDE 3.4.0 up to and including KDE 3.5.1 are affected.
+</li>
 
 
 
+
+
 </ul>
 
 
--- trunk/www/sites/www/info/3.4.2.php #505064:505065
@@ -45,8 +45,16 @@
 All versions of KDE starting with KDE 3.2.0 up to and including KDE 3.5.0 are \
affected.  </li>
 
+<li>
+kpdf contains a buffer overflow in its xpdf-based code which can be triggered 
+by a specially crafted pdf file.
+<br />Read the <a href="security/advisory-20060202-1.txt">detailed advisory</a>.
+All versions of KDE 3.4.0 up to and including KDE 3.5.1 are affected.
+</li>
 
 
+
+
 </ul>
 
 
--- trunk/www/sites/www/info/3.4.3.php #505064:505065
@@ -33,8 +33,16 @@
 All versions of KDE starting with KDE 3.2.0 up to and including KDE 3.5.0 are \
affected.  </li>
 
+<li>
+kpdf contains a buffer overflow in its xpdf-based code which can be triggered 
+by a specially crafted pdf file.
+<br />Read the <a href="security/advisory-20060202-1.txt">detailed advisory</a>.
+All versions of KDE 3.4.0 up to and including KDE 3.5.1 are affected.
+</li>
 
 
+
+
 </ul>
 
 
--- trunk/www/sites/www/info/3.4.php #505064:505065
@@ -80,10 +80,13 @@
 All versions of KDE starting with KDE 3.2.0 up to and including KDE 3.5.0 are \
affected.  </li>
 
+<li>
+kpdf contains a buffer overflow in its xpdf-based code which can be triggered 
+by a specially crafted pdf file.
+<br />Read the <a href="security/advisory-20060202-1.txt">detailed advisory</a>.
+All versions of KDE 3.4.0 up to and including KDE 3.5.1 are affected.
+</li>
 
-
-
-
 </ul>
 
 
--- trunk/www/sites/www/info/3.5.1.php #505064:505065
@@ -20,7 +20,15 @@
 unless stated otherwise.</p>
 
 <ul>
-<li>None known yet</li>
+
+<li>
+kpdf contains a buffer overflow in its xpdf-based code which can be triggered 
+by a specially crafted pdf file.
+<br />Read the <a href="security/advisory-20060202-1.txt">detailed advisory</a>.
+All versions of KDE 3.4.0 up to and including KDE 3.5.1 are affected.
+</li>
+
+
 </ul>
 
 <h2><a name="bugs">Bugs</a></h2>
--- trunk/www/sites/www/info/3.5.php #505064:505065
@@ -32,7 +32,16 @@
 <br />Read the <a href="security/advisory-20060119-1.txt">detailed advisory</a>.
 All versions of KDE starting with KDE 3.2.0 up to and including KDE 3.5.0 are \
affected.  </li>
+<li>
+kpdf contains a buffer overflow in its xpdf-based code which can be triggered 
+by a specially crafted pdf file.
+<br />Read the <a href="security/advisory-20060202-1.txt">detailed advisory</a>.
+All versions of KDE 3.4.0 up to and including KDE 3.5.1 are affected.
+</li>
 
+
+
+
 </ul>
 
 
--- trunk/www/sites/www/info/security/index.php #505064:505065
@@ -19,6 +19,7 @@
 order.</p> 
 
 <ul>
+  <li><a href="./advisory-20060202-1.txt">2006-02-02 kpdf/xpdf heap based buffer \
overflow</a></li>  <li><a href="./advisory-20060119-1.txt">2006-01-19 kjs \
encodeuri/decodeuri heap overflow vulnerability</a></li>  <li><a \
href="./advisory-20051207-2.txt">2006-01-03 kpdf/xpdf multiple integer \
overflows</a></li>  <li><a href="./advisory-20051011-1.txt">2005-10-11 KOffice KWord \
RTF import buffer overflow</a></li>


[prev in list] [next in list] [prev in thread] [next in thread]