Ubuntu
tetex-bin package

tetex-bin 3.0-13ubuntu6.1 source package in Ubuntu

Changelog

tetex-bin (3.0-13ubuntu6.1) dapper-security; urgency=low

  * SECURITY UPDATE: improper bounds on static buffer results in stack-based
    buffer overflow
  * debian/patches/SECURITY_CVE-2007-5935.patch: make sure tmpbuf is allocated
    enough memory in texk/dvipsk/hps.c
  * SECURITY UPDATE: temporary file race condition in dviljk due to use of
    tmpnam()
  * SECURITY UPDATE: various buffer overflows in dviljk due to not checking
    memory boundaries
  * debian/patches/SECURITY_CVE-2007-5936+5937.patch: use mkdtemp() if
    available in dvi2xx.c.  Replace calls to strcpy() and do proper bounds
    checking in dvi2xx.*.
  * References
    CVE-2007-5935
    CVE-2007-5936
    CVE-2007-5937

 -- Jamie Strandboge <email address hidden>   Tue,  4 Dec 2007 13:57:25 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Dapper
Original maintainer:
teTeX maintainers
Architectures:
any
Section:
tex
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
tetex-bin_3.0.orig.tar.gz 12.2 MiB 9c0f7eaeb5ba6dc6f66433404d264941bf95cded2fa798b1f7a9dd580c21649b
tetex-bin_3.0-13ubuntu6.1.diff.gz 144.3 KiB db9aa5ca8f99e7cb29beb53671d123746e0252d0233987fc2ad378259cb59722
tetex-bin_3.0-13ubuntu6.1.dsc 1.0 KiB bd5f12a0ba82d52bb2e93ae7ff7818b1ba36c54aef382bf2326d268ae9998728

View changes file

Binary packages built by this source

libkpathsea4: No summary available for libkpathsea4 in ubuntu dapper.

No description available for libkpathsea4 in ubuntu dapper.

libkpathsea4-dev: No summary available for libkpathsea4-dev in ubuntu dapper.

No description available for libkpathsea4-dev in ubuntu dapper.

tetex-bin: No summary available for tetex-bin in ubuntu dapper.

No description available for tetex-bin in ubuntu dapper.