Red Hat Security AdvisoryRHSA-2010:0753
kdegraphics security update
Released 2010-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kdegraphics-7:3.3.1-18.el4_8.1, kdegraphics-7:3.3.1-18.el4_8.1.i386, kdegraphics-7:3.3.1-18.el4_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) kdegraphics-7:3.5.4-17.el5_5.1, kdegraphics-7:3.5.4-17.el5_5.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) kdegraphics-7:3.5.4-17.el5_5.1, kdegraphics-devel-7:3.5.4-17.el5_5.1, kdegraphics-devel-7:3.5.4-17.el5_5.1.i386
- Red Hat Enterprise Linux Desktop version 4 kdegraphics-7:3.3.1-18.el4_8.1, kdegraphics-7:3.3.1-18.el4_8.1.i386, kdegraphics-devel-7:3.3.1-18.el4_8.1 +1
- Red Hat Enterprise Linux ES version 4 kdegraphics-7:3.3.1-18.el4_8.1, kdegraphics-7:3.3.1-18.el4_8.1.i386, kdegraphics-7:3.3.1-18.el4_8.1.ia64 +3
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) kdegraphics-7:3.5.4-17.el5_5.1, kdegraphics-7:3.5.4-17.el5_5.1.i386, kdegraphics-devel-7:3.5.4-17.el5_5.1 +1
- Red Hat Enterprise Linux WS version 4 kdegraphics-7:3.3.1-18.el4_8.1, kdegraphics-7:3.3.1-18.el4_8.1.i386, kdegraphics-7:3.3.1-18.el4_8.1.ia64 +3
Fixes 2 records
Priority LOW 38
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a deni…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02757 · Published 2010-11-05 · Partial fix CWE-476
Priority LOW 36
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attac…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03597 · Published 2010-11-05 · Fixed CWE-20
