Home / mailings [RHSA-2007:1028-01] Important: tetex security update
Posted on 07 November 2007
RedHat-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Important: tetex security update
Advisory ID: RHSA-2007:1028-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2007-1028.html
Issue date: 2007-11-07
Updated on: 2007-11-07
Product: Red Hat Enterprise Linux
CVE Names: CVE-2007-5393
- ---------------------------------------------------------------------
1. Summary:
Updated tetex packages that fix a security issue are now available for Red
Hat Enterprise Linux 2.1 and 3.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
3. Problem description:
TeTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input, and creates a typesetter-independent DeVice
Independent (dvi) file as output.
Alin Rad Pop discovered a flaw in the handling of PDF files. An attacker
could create a malicious PDF file that would cause TeTeX to crash, or
potentially execute arbitrary code when opened. (CVE-2007-5393)
Users are advised to upgrade to these updated packages, which contain
backported patches to resolve these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
5. Bug IDs fixed (http://bugzilla.redhat.com/):
345121 - CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()
6. RPMs required:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 :
SRPMS:
ftp://updates.redhat.com/enterprise/2.1AS/en/os/SRPMS/tetex-1.0.7-38.5E.12.src.rpm
a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
i386:
cd1bdbe1b8abb51edc4bdad77db33f7b tetex-1.0.7-38.5E.12.i386.rpm
0a20e9a986c097a84fda16e6eff43087 tetex-afm-1.0.7-38.5E.12.i386.rpm
e274eeb425bf5f9a0de80d2f864746a7 tetex-doc-1.0.7-38.5E.12.i386.rpm
c64a654ae3d47604690790c4b5879f2f tetex-dvilj-1.0.7-38.5E.12.i386.rpm
fe7648c4e4304f9ed65fe00038752341 tetex-dvips-1.0.7-38.5E.12.i386.rpm
446cb180d0e909594eb99f7dfa64bc77 tetex-fonts-1.0.7-38.5E.12.i386.rpm
b6973422f0f349d9d72d97a038ada611 tetex-latex-1.0.7-38.5E.12.i386.rpm
4140df46de0a89b50d465d1cd9086363 tetex-xdvi-1.0.7-38.5E.12.i386.rpm
ia64:
7a5a40f2085ea2091752619040f27de7 tetex-1.0.7-38.5E.12.ia64.rpm
e483ac8983a0b446d412aeaa8d429369 tetex-afm-1.0.7-38.5E.12.ia64.rpm
6bcfc102d17b2c50bd31606115ffc9ac tetex-doc-1.0.7-38.5E.12.ia64.rpm
c1f55c0de9eb92f00cbaeb328e074c88 tetex-dvilj-1.0.7-38.5E.12.ia64.rpm
f040436251a09cc62ac3b2f88cce243e tetex-dvips-1.0.7-38.5E.12.ia64.rpm
1513df82cd2191e5aefbca3a0f1103e0 tetex-fonts-1.0.7-38.5E.12.ia64.rpm
722cf2363da00e1bf627507652c45f55 tetex-latex-1.0.7-38.5E.12.ia64.rpm
4b131e2abf9b590ae8748761032d6970 tetex-xdvi-1.0.7-38.5E.12.ia64.rpm
Red Hat Linux Advanced Workstation 2.1:
SRPMS:
ftp://updates.redhat.com/enterprise/2.1AW/en/os/SRPMS/tetex-1.0.7-38.5E.12.src.rpm
a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
ia64:
7a5a40f2085ea2091752619040f27de7 tetex-1.0.7-38.5E.12.ia64.rpm
e483ac8983a0b446d412aeaa8d429369 tetex-afm-1.0.7-38.5E.12.ia64.rpm
6bcfc102d17b2c50bd31606115ffc9ac tetex-doc-1.0.7-38.5E.12.ia64.rpm
c1f55c0de9eb92f00cbaeb328e074c88 tetex-dvilj-1.0.7-38.5E.12.ia64.rpm
f040436251a09cc62ac3b2f88cce243e tetex-dvips-1.0.7-38.5E.12.ia64.rpm
1513df82cd2191e5aefbca3a0f1103e0 tetex-fonts-1.0.7-38.5E.12.ia64.rpm
722cf2363da00e1bf627507652c45f55 tetex-latex-1.0.7-38.5E.12.ia64.rpm
4b131e2abf9b590ae8748761032d6970 tetex-xdvi-1.0.7-38.5E.12.ia64.rpm
Red Hat Enterprise Linux ES version 2.1:
SRPMS:
ftp://updates.redhat.com/enterprise/2.1ES/en/os/SRPMS/tetex-1.0.7-38.5E.12.src.rpm
a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
i386:
cd1bdbe1b8abb51edc4bdad77db33f7b tetex-1.0.7-38.5E.12.i386.rpm
0a20e9a986c097a84fda16e6eff43087 tetex-afm-1.0.7-38.5E.12.i386.rpm
e274eeb425bf5f9a0de80d2f864746a7 tetex-doc-1.0.7-38.5E.12.i386.rpm
c64a654ae3d47604690790c4b5879f2f tetex-dvilj-1.0.7-38.5E.12.i386.rpm
fe7648c4e4304f9ed65fe00038752341 tetex-dvips-1.0.7-38.5E.12.i386.rpm
446cb180d0e909594eb99f7dfa64bc77 tetex-fonts-1.0.7-38.5E.12.i386.rpm
b6973422f0f349d9d72d97a038ada611 tetex-latex-1.0.7-38.5E.12.i386.rpm
4140df46de0a89b50d465d1cd9086363 tetex-xdvi-1.0.7-38.5E.12.i386.rpm
Red Hat Enterprise Linux WS version 2.1:
SRPMS:
ftp://updates.redhat.com/enterprise/2.1WS/en/os/SRPMS/tetex-1.0.7-38.5E.12.src.rpm
a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
i386:
cd1bdbe1b8abb51edc4bdad77db33f7b tetex-1.0.7-38.5E.12.i386.rpm
0a20e9a986c097a84fda16e6eff43087 tetex-afm-1.0.7-38.5E.12.i386.rpm
e274eeb425bf5f9a0de80d2f864746a7 tetex-doc-1.0.7-38.5E.12.i386.rpm
c64a654ae3d47604690790c4b5879f2f tetex-dvilj-1.0.7-38.5E.12.i386.rpm
fe7648c4e4304f9ed65fe00038752341 tetex-dvips-1.0.7-38.5E.12.i386.rpm
446cb180d0e909594eb99f7dfa64bc77 tetex-fonts-1.0.7-38.5E.12.i386.rpm
b6973422f0f349d9d72d97a038ada611 tetex-latex-1.0.7-38.5E.12.i386.rpm
4140df46de0a89b50d465d1cd9086363 tetex-xdvi-1.0.7-38.5E.12.i386.rpm
Red Hat Enterprise Linux AS version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm
9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386:
258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
ia64:
ae5fbbb76abeaa6d54d346c0faf200e8 tetex-1.0.7-67.11.ia64.rpm
4173b80aa25be5e0305f7b1dd1c3439f tetex-afm-1.0.7-67.11.ia64.rpm
8809c8ce4857c19b829e9a7a06e05ba4 tetex-debuginfo-1.0.7-67.11.ia64.rpm
fd8d4b9cd499b1564efd83b0dcbf3441 tetex-dvips-1.0.7-67.11.ia64.rpm
51f9d66ecaba190afa9215cc9a63ac34 tetex-fonts-1.0.7-67.11.ia64.rpm
91e61d93242483f4512f3bba288b2d3f tetex-latex-1.0.7-67.11.ia64.rpm
08c93511d76ff339ec2f9c864c9c8205 tetex-xdvi-1.0.7-67.11.ia64.rpm
ppc:
fba905be4b16011b872c8ffc0b213a50 tetex-1.0.7-67.11.ppc.rpm
10e9a154cf12630d99b716844c00ca91 tetex-afm-1.0.7-67.11.ppc.rpm
c656abb71fcd8ec9a12913e09b605aa5 tetex-debuginfo-1.0.7-67.11.ppc.rpm
a5482c9211715866705e215a830738e6 tetex-dvips-1.0.7-67.11.ppc.rpm
a10414192f9c526021017138e70ca725 tetex-fonts-1.0.7-67.11.ppc.rpm
a4ffc0fa998c219669e068b19cdb1552 tetex-latex-1.0.7-67.11.ppc.rpm
cdc07fc8b8ab169299b39b500835817d tetex-xdvi-1.0.7-67.11.ppc.rpm
s390:
78cc3f0afc063dfbe6afb09018cba87d tetex-1.0.7-67.11.s390.rpm
72bf0382e1817f2f0f5f3050b42a35f5 tetex-afm-1.0.7-67.11.s390.rpm
29464cdf28c782db83de87d4b89ee0e6 tetex-debuginfo-1.0.7-67.11.s390.rpm
883bea76b18b42b3ef7052e6fcb0fae2 tetex-dvips-1.0.7-67.11.s390.rpm
cee97ddea1d562f969b300dec55d8047 tetex-fonts-1.0.7-67.11.s390.rpm
b2af293e49a1353abe3f7346c492d435 tetex-latex-1.0.7-67.11.s390.rpm
36a23c2e9cfdfe8abe8236c68b1b7ff3 tetex-xdvi-1.0.7-67.11.s390.rpm
s390x:
47bc340dd814ba4aefeb616b5914a9fc tetex-1.0.7-67.11.s390x.rpm
f06c85101364e68dae12e423f49c6ae0 tetex-afm-1.0.7-67.11.s390x.rpm
9e441fc9a775fd5af5bdcbac34d57be8 tetex-debuginfo-1.0.7-67.11.s390x.rpm
93ec176639dd1381b8089d259b722971 tetex-dvips-1.0.7-67.11.s390x.rpm
4399413b190538d5ae6eae47fa30daef tetex-fonts-1.0.7-67.11.s390x.rpm
20756ec098a68f83e7ac5d2b6a4e96ff tetex-latex-1.0.7-67.11.s390x.rpm
111bdc122a8dc1d3baa742aa636d8085 tetex-xdvi-1.0.7-67.11.s390x.rpm
x86_64:
031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
Red Hat Desktop version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm
9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386:
258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
x86_64:
031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm
9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386:
258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
ia64:
ae5fbbb76abeaa6d54d346c0faf200e8 tetex-1.0.7-67.11.ia64.rpm
4173b80aa25be5e0305f7b1dd1c3439f tetex-afm-1.0.7-67.11.ia64.rpm
8809c8ce4857c19b829e9a7a06e05ba4 tetex-debuginfo-1.0.7-67.11.ia64.rpm
fd8d4b9cd499b1564efd83b0dcbf3441 tetex-dvips-1.0.7-67.11.ia64.rpm
51f9d66ecaba190afa9215cc9a63ac34 tetex-fonts-1.0.7-67.11.ia64.rpm
91e61d93242483f4512f3bba288b2d3f tetex-latex-1.0.7-67.11.ia64.rpm
08c93511d76ff339ec2f9c864c9c8205 tetex-xdvi-1.0.7-67.11.ia64.rpm
x86_64:
031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
Red Hat Enterprise Linux WS version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm
9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386:
258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
ia64:
ae5fbbb76abeaa6d54d346c0faf200e8 tetex-1.0.7-67.11.ia64.rpm
4173b80aa25be5e0305f7b1dd1c3439f tetex-afm-1.0.7-67.11.ia64.rpm
8809c8ce4857c19b829e9a7a06e05ba4 tetex-debuginfo-1.0.7-67.11.ia64.rpm
fd8d4b9cd499b1564efd83b0dcbf3441 tetex-dvips-1.0.7-67.11.ia64.rpm
51f9d66ecaba190afa9215cc9a63ac34 tetex-fonts-1.0.7-67.11.ia64.rpm
91e61d93242483f4512f3bba288b2d3f tetex-latex-1.0.7-67.11.ia64.rpm
08c93511d76ff339ec2f9c864c9c8205 tetex-xdvi-1.0.7-67.11.ia64.rpm
x86_64:
031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393
http://www.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2007 Red Hat, Inc.
