Skip to content
OpenAdvisories
Unscored RHSA-2009:1503 5 CVEs

Red Hat Security Advisory: gpdf security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as gpdf 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::as gpdf-debuginfo 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop gpdf 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop gpdf-debuginfo 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es gpdf 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es gpdf-debuginfo 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws gpdf 0:2.8.2-7.7.2.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws gpdf-debuginfo 0:2.8.2-7.7.2.el4_8.5

Vulnerabilities 5

  • Unscored —
    CVE-2009-0791

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

    cups Debian
  • Unscored —
    CVE-2009-1188

    Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.…

    poppler xpdf Debian
  • Unscored —
    CVE-2009-3604

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kd…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3608 EPSS 10%

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2009-3609

    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…

    poppler ipe xpdf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526911
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1503.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0791
  • report
    https://access.redhat.com/security/cve/CVE-2009-1188
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1188
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1188
  • report
    https://access.redhat.com/security/cve/CVE-2009-3604
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3604
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3604
  • report
    https://access.redhat.com/security/cve/CVE-2009-3608
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3608
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3608
  • report
    https://access.redhat.com/security/cve/CVE-2009-3609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3609