source: projects/web/trunk/errata/5x/20091104-3.dat @ 1284

<date>
2009,11,04

<title>
poppler にセキュリティホール

<target>
5.0/i386, 5.0/x86_64, 5.0/ppc

<url>
http://www.vupen.com/english/advisories/2009/2925
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3603
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3607
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3609

<info>
poppler に元となる xpdf に起因する問題が
複数発見されました。
巧妙に作られた pdf ファイルを開かせること
により、攻撃者はアプリのクラッシュや
任意のコードの実行ができる可能性があります。
(CVE-2009-3603,3607,3608,3609)


<directory>
Vine-5.0/updates/RPMS/i386
Vine-5.0/updates/RPMS/x86_64
Vine-5.0/updates/RPMS/ppc

<update>
 [ size ] [ SHA1 checksum ]                        [ file name ]
  1537067 685f4b4fcf8382ee50fd60eefccf72dbec5bfeb9 poppler-0.10.7-4vl5.src.rpm

   898197 dee85152cdb1e3b4ed5eb26300708f1f0cea65aa poppler-0.10.7-4vl5.i386.rpm
   216200 24f846d198b114667f884ebb1644b94b552a98a1 poppler-devel-0.10.7-4vl5.i386.rpm
    29506 95bff719987cfade5890ed519dd2c9f7767e6b30 poppler-qt-0.10.7-4vl5.i386.rpm
    11988 cdeeda33915ba81b736600bf07d40acd7a1868ec poppler-qt-devel-0.10.7-4vl5.i386.rpm
   165834 b30ffaa5b3de203dd398f100fcce60edefec992f poppler-qt4-0.10.7-4vl5.i386.rpm
    27447 e24d114a25109a4cbc5f3dcdad740ecf265a55ae poppler-qt4-devel-0.10.7-4vl5.i386.rpm

   919339 8d666ddf841a4a63d0aadd0653b95150a82a87de poppler-0.10.7-4vl5.x86_64.rpm
   216177 72e4e3c795b1b30c6320088dbb43149c60f7ebf3 poppler-devel-0.10.7-4vl5.x86_64.rpm
    30035 5f3a701c2a7270e4a489b46c8cd4806d73f47cf4 poppler-qt-0.10.7-4vl5.x86_64.rpm
    11997 beeebb4512dac04f16c7815fa5f92a13ff75a6b8 poppler-qt-devel-0.10.7-4vl5.x86_64.rpm
   167633 89a9714280ceb80ca9624abc0494971ae39580f5 poppler-qt4-0.10.7-4vl5.x86_64.rpm
    27454 1adb5f539c82f2d3e8ab3a8fe9377c37f95c9115 poppler-qt4-devel-0.10.7-4vl5.x86_64.rpm