新的xpdf包修正任意代码执行缺陷 (Linux,补丁) 涉及程序： pdftops 描述： 新的xpdf包修正任意代码执行缺陷 详细： xpdf包中的pdftops过滤程序存在一个整数溢出漏洞,能使攻击者获得与目标用户相同的权限。如果pdftops程序存在于打印过滤器中，将导致攻击者获得“lp\"用户的权限。 对于当前稳定发行的版本(woody)这个缺陷在版本1.00-3.1中被修正； 对于以前稳定发行的版本(potato)这个缺陷在版本0.90-8.1中被修正； 对于不稳定的发行(sid)这个缺陷在版本2.01-2中被修正。 攻击方法： 暂无有效攻击代码 解决方案： 建议用户升级xpdf包。 升级说明： wget url：取得升级文件； dpkg -i file.deb：安装参考文件； 如果使用apt-get包管理器： apt-get update：更新内部数据库； apt-get upgrade：安装正确的包； 通过进行适当的配置能使用自动更新。 Debian GNU/Linux 2.2 alias potato - --------------------------------- Source archives: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1.dsc Size/MD5 checksum: 574 2a6a10836edfa134643e54eabdf7800a http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1.diff.gz Size/MD5 checksum: 5732 6048fc73fb6c3bdb84988bfa14f39e4d http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90.orig.tar.gz Size/MD5 checksum: 391204 a7678b64713a466279b61c28ba01134b Alpha architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1_arm.deb Size/MD5 checksum: 1044416 de2ee7c2dbc53fbd288e0c142eca2c73 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1_i386.deb Size/MD5 checksum: 970292 903b558758cecb9010d49bc011feba9c Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1_m68k.deb Size/MD5 checksum: 937202 414e5f0c67a0d8dbb5403d2b3f4cdefd PowerPC architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1_powerpc.deb Size/MD5 checksum: 998784 6e2c8520b103de3d997f22d5bd1edc43 Sun Sparc architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_0.90-8.1_sparc.deb Size/MD5 checksum: 967906 4f91ac10e70deeddf31910c8b8804dcc Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: http://security.debian.org/pool/updates/main/x/xpdf/xpdf_1.00-3.1.dsc Size/MD5 checksum: 705 10b8248182e33e5f808b918164c65e1a http://security.debian.org/pool/updates/main/x/xpdf/xpdf_1.00-3.1.diff.gz Size/MD5 checksum: 9193 b2a726030843f6dba93fca9cf7ee2f07 http://security.debian.org/pool/updates/main/x/xpdf/xpdf_1.00.orig.tar.gz Size/MD5 checksum: 397750 81f3c381cef729e4b6f4ce21cf5bbf3c Architecture independent components: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-common_1.00-3.1_all.deb Size/MD5 checksum: 38352 5d2bb590b9e8048777f97ae716ad7fd9 http://security.debian.org/pool/updates/main/x/xpdf/xpdf_1.00-3.1_all.deb Size/MD5 checksum: 1284 96fad618de11d4bb5a417597f52fd140 Alpha architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_alpha.deb Size/MD5 checksum: 570340 abcba0057c5163cfa16677861afe0444 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_alpha.deb Size/MD5 checksum: 1043778 fff419b1f683dda8d42c6cf5a532466a ARM architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_arm.deb Size/MD5 checksum: 486522 181d893a1d72fb57ec2a710b686d9653 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_arm.deb Size/MD5 checksum: 885110 197c160a3a8e369120ebf6c0b3887fc2 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_i386.deb Size/MD5 checksum: 449114 aaf65860ba521173078d4bd05d509221 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_i386.deb Size/MD5 checksum: 827038 8e6f7917d7beab9791ae199df03ed137 Intel IA-64 architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_ia64.deb Size/MD5 checksum: 681614 b5c776d364d54288eeca24b2bc3c3f16 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_ia64.deb Size/MD5 checksum: 1226210 192370f58c4ea2c0b0afe081e06c814a HP Precision architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_hppa.deb Size/MD5 checksum: 563210 a299eac56445c113a2e1c854e6aa4b41 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_hppa.deb Size/MD5 checksum: 1031636 ad0fd54f0b845aeb0833f1251728f150 Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_m68k.deb Size/MD5 checksum: 427002 645824dbba65ad2d348a6506c3693786 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_m68k.deb Size/MD5 checksum: 793786 a7dbbb63426e69e461f71b8e09daae1b Big endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_mips.deb Size/MD5 checksum: 554532 06ae29ea680a8d5147eb7ecc4e2a6a89 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_mips.deb Size/MD5 checksum: 1015364 2c9e8af2ecfed78b81afc4b71b1b252d Little endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_mipsel.deb Size/MD5 checksum: 545672 f91403c256d83e17565a3e6d7dfcf3ec http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_mipsel.deb Size/MD5 checksum: 997232 37178c976f59ad89fe70250cb5a36927 PowerPC architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_powerpc.deb Size/MD5 checksum: 469694 7fc743072be7aa60ca276300df5c31b1 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_powerpc.deb Size/MD5 checksum: 858468 0608406ee86bbb12d612ceb2b70822ac IBM S/390 architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_s390.deb Size/MD5 checksum: 420886 f1a7ce5d72574bac00f6ab033ddbc549 http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_s390.deb Size/MD5 checksum: 771686 1321ebf1e33163335c024e0489734734 Sun Sparc architecture: http://security.debian.org/pool/updates/main/x/xpdf/xpdf-reader_1.00-3.1_sparc.deb Size/MD5 checksum: 443210 39beec8cccdfc893fa1f6d04b7f5e1cb http://security.debian.org/pool/updates/main/x/xpdf/xpdf-utils_1.00-3.1_sparc.deb Size/MD5 checksum: 808376 a445dd84481dbd9f283a6365066ef992