TITLE:
Debian update for pdfkit.framework

SECUNIA ADVISORY ID:
SA18882

VERIFY ADVISORY:
http://secunia.com/advisories/18882/

CRITICAL:
Moderately critical

IMPACT:
DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 3.1
http://secunia.com/product/5307/

DESCRIPTION:
Debian has issued an update for pdfkit.framework. This fixes a
vulnerability, which can be exploited by malicious people to cause a
DoS (Denial of Service) and potentially compromise a user's system.

For more information:
SA18274

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2.dsc
Size/MD5 checksum: 725 7f73aebe47f6276e59274a791dbf9f1d
http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2.diff.gz
Size/MD5 checksum: 6014 04f72fb2031311bbf6bf433e440a18e7
http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8.orig.tar.gz
Size/MD5 checksum: 1780533 7676643ff78a0602c10bfb97fe0bd448

Alpha architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_alpha.deb
Size/MD5 checksum: 1822048 8321e3be8a859346ecbe90a5d80083ce

AMD64 architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_amd64.deb
Size/MD5 checksum: 1796860 5776df0db71190ae3f8557665079dfef

ARM architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_arm.deb
Size/MD5 checksum: 1756204 6aa00d8b3cb35e825bd57a531f1d8bce

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_i386.deb
Size/MD5 checksum: 1750532 4c22f6c78b52e7ce2b0ae0e1eaf002d6

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_ia64.deb
Size/MD5 checksum: 1981414 cad4fb0db7635253e96995f3b6e651ed

HP Precision architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_hppa.deb
Size/MD5 checksum: 1862592 330d89f3ee48fed31d74a726cfaf6fcc

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_m68k.deb
Size/MD5 checksum: 1785864 a15ba6704bf5e19a279721a9f2251e00

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_mips.deb
Size/MD5 checksum: 1769322 f718f5753e07c63ce3e724d72550c77c

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_mipsel.deb
Size/MD5 checksum: 1754998 ebc4a7863f86273a524fd88ae0f3778d

PowerPC architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_powerpc.deb
Size/MD5 checksum: 1770960 f24d246b3887c84b54cd261ec881c86c

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_s390.deb
Size/MD5 checksum: 1804896 053d61ae24a468c8361f12746f512260

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge2_sparc.deb
Size/MD5 checksum: 1780072 f82233c57040266da7ce18bb5708eafe

-- Debian GNU/Linux unstable alias sid --

Fixed in version 0.8-4 by switching to poppler.

ORIGINAL ADVISORY:
http://www.debian.org/security/2006/dsa-972

OTHER REFERENCES:
SA18274:
http://secunia.com/advisories/18274/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------