Ubuntu
tetex-bin package

tetex-bin 3.0-17ubuntu2.1 source package in Ubuntu

Changelog

tetex-bin (3.0-17ubuntu2.1) edgy-security; urgency=low

  * SECURITY UPDATE: improper bounds on static buffer results in stack-based
    buffer overflow
  * debian/patches/SECURITY_CVE-2007-5935.patch: make sure tmpbuf is allocated
    enough memory in texk/dvipsk/hps.c
  * SECURITY UPDATE: temporary file race condition in dviljk due to use of
    tmpnam()
  * SECURITY UPDATE: various buffer overflows in dviljk due to not checking
    memory boundaries
  * debian/patches/SECURITY_CVE-2007-5936+5937.patch: use mkdtemp() if
    available in dvi2xx.c.  Replace calls to strcpy() and do proper bounds
    checking in dvi2xx.*.
  * References
    CVE-2007-5935
    CVE-2007-5936
    CVE-2007-5937

 -- Jamie Strandboge <email address hidden>   Tue,  4 Dec 2007 14:05:54 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Edgy
Original maintainer:
teTeX maintainers
Architectures:
any
Section:
tex
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
tetex-bin_3.0.orig.tar.gz 12.2 MiB 9c0f7eaeb5ba6dc6f66433404d264941bf95cded2fa798b1f7a9dd580c21649b
tetex-bin_3.0-17ubuntu2.1.diff.gz 153.8 KiB a97493e22ad164d7e871f24fd19d4f732916f009d28637ee15caac806e3ba361
tetex-bin_3.0-17ubuntu2.1.dsc 1.0 KiB 2a2d17bc5fc51eae8fe50cede4a1243465e33654c855db8500031398c9bc9ba1

View changes file

Binary packages built by this source

libkpathsea-dev: No summary available for libkpathsea-dev in ubuntu edgy.

No description available for libkpathsea-dev in ubuntu edgy.

libkpathsea4: No summary available for libkpathsea4 in ubuntu edgy.

No description available for libkpathsea4 in ubuntu edgy.

tetex-bin: No summary available for tetex-bin in ubuntu edgy.

No description available for tetex-bin in ubuntu edgy.