Ubuntu
texlive-bin package

  1. Bug #537103
  2. Comment #7

Comment 7 for bug 537103

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package texlive-bin - 2009-5ubuntu0.1

---------------
texlive-bin (2009-5ubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: arbitrary code execution via memory corruption
    (LP: #537103)
    - debian/patches/security-CVE-2010-0827.patch: make sure name isn't
      too long in texk/dvipsk/virtualfont.c.
    - CVE-2010-0827
  * SECURITY UPDATE: arbitrary code execution via integer overflow
    - debian/patches/security-CVE-2010-0739,1440.patch: make sure numbytes
      doesn't overflow in texk/dvipsk/dospecial.c.
    - CVE-2010-0739
    - CVE-2010-1440
 -- Marc Deslauriers <email address hidden> Mon, 03 May 2010 09:05:31 -0400