[ MDVSA-2008:197-1 ] koffice

[dude67]

koffice

Kees Cook of Ubuntu security found a flaw in how poppler prior
to version 0.6 displayed malformed fonts embedded in PDF files.
An attacker could create a malicious PDF file that would cause
applications using poppler to crash, or possibly execute arbitrary
code when opened (CVE-2008-1693).

This vulnerability also affected KOffice, so the updated packages
have been patched to correct this issue.

Update:

A file conflicts existed between one of the library packages and
the koffice-devel package which prevented successful upgrades if
koffice-devel was previously installed. This update removes the
conflicting file from koffice-devel.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-1693
_______________________________________________________________________