kdegraphics security update

CentOS Errata and Security Advisory CESA-2006:0262

The kdegraphics packages contain applications for the K Desktop Environment
including kpdf, a PDF file viewer.

Marcelo Ricardo Leitner discovered that a kpdf security fix, CVE-2005-3627,
was incomplete. Red Hat issued kdegraphics packages with this incomplete
fix in RHSA-2005:868. An attacker could construct a carefully crafted PDF
file that could cause kpdf to crash or possibly execute arbitrary code when
opened. The Common Vulnerabilities and Exposures project assigned the name
CVE-2006-0746 to this issue.

Users of kpdf should upgrade to these updated packages, which contain a
backported patch to resolve this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-March/074880.html
https://lists.centos.org/pipermail/centos-announce/2006-March/074885.html
https://lists.centos.org/pipermail/centos-announce/2006-March/074887.html
https://lists.centos.org/pipermail/centos-announce/2006-March/074888.html
https://lists.centos.org/pipermail/centos-announce/2006-March/074895.html

Affected packages:
kdegraphics
kdegraphics-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0262