Skip to content
OpenAdvisories
Unscored RHSA-2009:0458 12 CVEs

Red Hat Security Advisory: gpdf security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as gpdf 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::as gpdf-debuginfo 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::desktop gpdf 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::desktop gpdf-debuginfo 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::es gpdf 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::es gpdf-debuginfo 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::ws gpdf 0:2.8.2-7.7.2.el4_7.4
Red Hat · RHEL 4 enterprise_linux:4::ws gpdf-debuginfo 0:2.8.2-7.7.2.el4_7.4

Vulnerabilities 12

  • Unscored —
    CVE-2009-0146

    Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products …

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0147

    Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0166

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to ca…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0195

    Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attacker…

    xpdf Debian
  • Unscored —
    CVE-2009-0799

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-0800

    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler bef…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1179

    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and o…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1180

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1181

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1182

    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before …

    poppler xpdf Debian
  • Unscored —
    CVE-2009-1183

    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products al…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-3606

    Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraph…

    poppler ipe xpdf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495886
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495899
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0458.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0146
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0146
  • report
    https://access.redhat.com/security/cve/CVE-2009-0147
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0147
  • report
    https://access.redhat.com/security/cve/CVE-2009-0166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0166
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0166
  • report
    https://access.redhat.com/security/cve/CVE-2009-0195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0195
  • report
    https://access.redhat.com/security/cve/CVE-2009-0799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0799
  • report
    https://access.redhat.com/security/cve/CVE-2009-0800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0800
  • report
    https://access.redhat.com/security/cve/CVE-2009-1179
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1179
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1179
  • report
    https://access.redhat.com/security/cve/CVE-2009-1180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1180
  • report
    https://access.redhat.com/security/cve/CVE-2009-1181
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1181