-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDKSA-2007:109 http://www.mandriva.com/security/ _______________________________________________________________________ Package : tetex Date : May 23, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 _______________________________________________________________________ Problem Description: Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font. Tetex 3.x uses an embedded copy of the gd source and may also be affected by this issue (CVE-2007-0455). A buffer overflow in the open_sty function for makeindex in Tetex could allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename (CVE-2007-0650). The updated packages have been patched to prevent these issues. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0455 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0650 _______________________________________________________________________ Updated Packages: Mandriva Linux 2007.0: f2fb0b9d245e499e2fc1138a038b3e7c 2007.0/i586/jadetex-3.12-116.2mdv2007.0.i586.rpm 9837dfed443636fd08b9e375204d22f3 2007.0/i586/tetex-3.0-18.2mdv2007.0.i586.rpm d4973051015bd0e48b89934f73fd5897 2007.0/i586/tetex-afm-3.0-18.2mdv2007.0.i586.rpm b1fd20a365cb89f9adbb056957800730 2007.0/i586/tetex-context-3.0-18.2mdv2007.0.i586.rpm 13ee210196e3f1c0e997e50520e04168 2007.0/i586/tetex-devel-3.0-18.2mdv2007.0.i586.rpm e90f6b31569572defb05df637b47256b 2007.0/i586/tetex-doc-3.0-18.2mdv2007.0.i586.rpm e5059f0d5fbcbe39514080c402403668 2007.0/i586/tetex-dvilj-3.0-18.2mdv2007.0.i586.rpm ea99b66036aae65ebd4dc61c926371c2 2007.0/i586/tetex-dvipdfm-3.0-18.2mdv2007.0.i586.rpm 6ad19d54b5ffb9f36d89e25543614d6a 2007.0/i586/tetex-dvips-3.0-18.2mdv2007.0.i586.rpm 2ed6744049834e1b5571c014039cad73 2007.0/i586/tetex-latex-3.0-18.2mdv2007.0.i586.rpm 68710a0017149bab9bd9c45e72500e4d 2007.0/i586/tetex-mfwin-3.0-18.2mdv2007.0.i586.rpm e86f54a2dd0c686181b5095612dd36e6 2007.0/i586/tetex-texi2html-3.0-18.2mdv2007.0.i586.rpm 52cefb34a64cb9153f2089e01c1c41a3 2007.0/i586/tetex-xdvi-3.0-18.2mdv2007.0.i586.rpm 8ee8896d09ee50dcb43dfafb27af7450 2007.0/i586/xmltex-1.9-64.2mdv2007.0.i586.rpm 7332b25d4445a16a6e8cf7dde312f8b3 2007.0/SRPMS/tetex-3.0-18.2mdv2007.0.src.rpm Mandriva Linux 2007.0/X86_64: bd2a21204202fc7101a14cd843dc6675 2007.0/x86_64/jadetex-3.12-116.2mdv2007.0.x86_64.rpm 18a2ebd864bda026ed9deae0260f2c6a 2007.0/x86_64/tetex-3.0-18.2mdv2007.0.x86_64.rpm 08674c2aaf3dc4e64d79e356351b16ec 2007.0/x86_64/tetex-afm-3.0-18.2mdv2007.0.x86_64.rpm 099958867b65722546ff5616168d353b 2007.0/x86_64/tetex-context-3.0-18.2mdv2007.0.x86_64.rpm ab7b5ddd7032163f9538cbfeb972c36f 2007.0/x86_64/tetex-devel-3.0-18.2mdv2007.0.x86_64.rpm 80d8c28897a373290a3e7da9e7450049 2007.0/x86_64/tetex-doc-3.0-18.2mdv2007.0.x86_64.rpm 25b68b1ec84b71b41670441bd14e3662 2007.0/x86_64/tetex-dvilj-3.0-18.2mdv2007.0.x86_64.rpm 1145106d1b43d66780ef9e5fbf7b41e0 2007.0/x86_64/tetex-dvipdfm-3.0-18.2mdv2007.0.x86_64.rpm 6a7f1c5b69eec1d6dc909d1a4bd60e62 2007.0/x86_64/tetex-dvips-3.0-18.2mdv2007.0.x86_64.rpm 99fb2ba27ba3ee62627f98e3a293961a 2007.0/x86_64/tetex-latex-3.0-18.2mdv2007.0.x86_64.rpm 8fd128897ea8795205e09e26df2d9936 2007.0/x86_64/tetex-mfwin-3.0-18.2mdv2007.0.x86_64.rpm f8d9a6b42f6ac0e8cbbe49db185683aa 2007.0/x86_64/tetex-texi2html-3.0-18.2mdv2007.0.x86_64.rpm dcbdb99c0cb719fdf46462266b8c0b1b 2007.0/x86_64/tetex-xdvi-3.0-18.2mdv2007.0.x86_64.rpm 9d4136876004296084ccccb2e8901ba8 2007.0/x86_64/xmltex-1.9-64.2mdv2007.0.x86_64.rpm 7332b25d4445a16a6e8cf7dde312f8b3 2007.0/SRPMS/tetex-3.0-18.2mdv2007.0.src.rpm Mandriva Linux 2007.1: b0c390f76cf5b5345d5c09ca69d3c059 2007.1/i586/jadetex-3.12-129.1mdv2007.1.i586.rpm 5ee999211c58309118a09d98cc334711 2007.1/i586/tetex-3.0-31.1mdv2007.1.i586.rpm 824ed1c03ce87ed9735d918badd463c3 2007.1/i586/tetex-afm-3.0-31.1mdv2007.1.i586.rpm d26541171e2d048cce9b708bd75771ad 2007.1/i586/tetex-context-3.0-31.1mdv2007.1.i586.rpm 81c9101b8ff1c83ce091be00328ec0ba 2007.1/i586/tetex-devel-3.0-31.1mdv2007.1.i586.rpm c14a60cccb6b00a8f3df515b7640d7b7 2007.1/i586/tetex-doc-3.0-31.1mdv2007.1.i586.rpm cae0f034ff475c0ba70cf02a2a977ba6 2007.1/i586/tetex-dvilj-3.0-31.1mdv2007.1.i586.rpm b4c68dbaed85af6334e1716d83327d2b 2007.1/i586/tetex-dvipdfm-3.0-31.1mdv2007.1.i586.rpm 377f9fd4e3ad4ef7fa64a93b34c2a93b 2007.1/i586/tetex-dvips-3.0-31.1mdv2007.1.i586.rpm 5a80c5a2bded8b079d136a07ddba8860 2007.1/i586/tetex-latex-3.0-31.1mdv2007.1.i586.rpm 047e0abadaa73d98d6f7df9e86d079bc 2007.1/i586/tetex-mfwin-3.0-31.1mdv2007.1.i586.rpm e05a770ad5bbd460f649f3e97603fdc3 2007.1/i586/tetex-texi2html-3.0-31.1mdv2007.1.i586.rpm 1e3549f969eb15273cd985c56e030d1f 2007.1/i586/tetex-usrlocal-3.0-31.1mdv2007.1.i586.rpm 6bafc48bd1afb2202d18bd4c7a392a09 2007.1/i586/tetex-xdvi-3.0-31.1mdv2007.1.i586.rpm 2d25c94ec807ef9e79c9411f6b1e5ab4 2007.1/i586/xmltex-1.9-77.1mdv2007.1.i586.rpm 6f72108fa75b366013c051dfdaa3c00b 2007.1/SRPMS/tetex-3.0-31.1mdv2007.1.src.rpm Mandriva Linux 2007.1/X86_64: 0f896082d16abfc556550384da047593 2007.1/x86_64/jadetex-3.12-129.1mdv2007.1.x86_64.rpm 0233b425630b3f798a9b59173d94136f 2007.1/x86_64/tetex-3.0-31.1mdv2007.1.x86_64.rpm 08f4c1b8e5122bc4f796d0730c990ba2 2007.1/x86_64/tetex-afm-3.0-31.1mdv2007.1.x86_64.rpm 700e4d4965c0efa6dbfa492c1b6c5600 2007.1/x86_64/tetex-context-3.0-31.1mdv2007.1.x86_64.rpm 9e20dcb2b92d55863fd86580f28527b0 2007.1/x86_64/tetex-devel-3.0-31.1mdv2007.1.x86_64.rpm cae67471381dd0b8e35994831415acc4 2007.1/x86_64/tetex-doc-3.0-31.1mdv2007.1.x86_64.rpm b8863374cbad4906248111a06fdaf6e9 2007.1/x86_64/tetex-dvilj-3.0-31.1mdv2007.1.x86_64.rpm 1e71cd23d4020dc8317051c6bc15a358 2007.1/x86_64/tetex-dvipdfm-3.0-31.1mdv2007.1.x86_64.rpm 626ee1efbd88acc8cccfbee5da1985ab 2007.1/x86_64/tetex-dvips-3.0-31.1mdv2007.1.x86_64.rpm 648fdbb1723f9f1293224da40fb3264d 2007.1/x86_64/tetex-latex-3.0-31.1mdv2007.1.x86_64.rpm a3522f9fe371890adc4721d0139906d4 2007.1/x86_64/tetex-mfwin-3.0-31.1mdv2007.1.x86_64.rpm e8ba7ab0942deab0967cc876512e1a20 2007.1/x86_64/tetex-texi2html-3.0-31.1mdv2007.1.x86_64.rpm 7d502b1bd83aa3da29c3445f333db9bf 2007.1/x86_64/tetex-usrlocal-3.0-31.1mdv2007.1.x86_64.rpm 61692c92d44a06189a35b57d03a7e716 2007.1/x86_64/tetex-xdvi-3.0-31.1mdv2007.1.x86_64.rpm 17070f0edb31a519ac58152f67f7053d 2007.1/x86_64/xmltex-1.9-77.1mdv2007.1.x86_64.rpm 6f72108fa75b366013c051dfdaa3c00b 2007.1/SRPMS/tetex-3.0-31.1mdv2007.1.src.rpm Corporate 3.0: 69fec44f571156f4892f3ce3304c2221 corporate/3.0/i586/jadetex-3.12-93.6.C30mdk.i586.rpm e8a6f51ec4ce24e9a49671d8120d9340 corporate/3.0/i586/tetex-2.0.2-14.6.C30mdk.i586.rpm 7bfa7ed152924e9d9e0003a9211b228e corporate/3.0/i586/tetex-afm-2.0.2-14.6.C30mdk.i586.rpm 87b1950ab06289054e397dbe54d1814f corporate/3.0/i586/tetex-context-2.0.2-14.6.C30mdk.i586.rpm bb584f7d5a9bf364156b2d417aeb40e2 corporate/3.0/i586/tetex-devel-2.0.2-14.6.C30mdk.i586.rpm 63de8b03b1464fece712e36f729a898a corporate/3.0/i586/tetex-doc-2.0.2-14.6.C30mdk.i586.rpm 21f2d4a4104f74e282b41417637ba4d4 corporate/3.0/i586/tetex-dvilj-2.0.2-14.6.C30mdk.i586.rpm 4e0478c74ea2e5ef38b5de6a58bcc812 corporate/3.0/i586/tetex-dvipdfm-2.0.2-14.6.C30mdk.i586.rpm ae85fecf42171fe00bf14ddad82038a5 corporate/3.0/i586/tetex-dvips-2.0.2-14.6.C30mdk.i586.rpm 1af2feb51a41f1fc6460b2c810e03beb corporate/3.0/i586/tetex-latex-2.0.2-14.6.C30mdk.i586.rpm c336772d422355e4585c7b15e3f57b62 corporate/3.0/i586/tetex-mfwin-2.0.2-14.6.C30mdk.i586.rpm c3f69b000f0f7f925033fd7314776ca4 corporate/3.0/i586/tetex-texi2html-2.0.2-14.6.C30mdk.i586.rpm 070c9cbe961d604459cce982bf441232 corporate/3.0/i586/tetex-xdvi-2.0.2-14.6.C30mdk.i586.rpm 3743e29d11c908288ba225b389d8a777 corporate/3.0/i586/xmltex-1.9-41.6.C30mdk.i586.rpm 72dd7067c3e01870a36c200dea46d98f corporate/3.0/SRPMS/tetex-2.0.2-14.6.C30mdk.src.rpm Corporate 3.0/X86_64: 1c4bcc2589858644c8b2456a4c63f355 corporate/3.0/x86_64/jadetex-3.12-93.6.C30mdk.x86_64.rpm 0b20d640eb8d18f1a5ddbaa61f0b9c12 corporate/3.0/x86_64/tetex-2.0.2-14.6.C30mdk.x86_64.rpm ba7fe18d47ae12685daf0467f9c2e32a corporate/3.0/x86_64/tetex-afm-2.0.2-14.6.C30mdk.x86_64.rpm 39304c8b7a86e202f587955f61610791 corporate/3.0/x86_64/tetex-context-2.0.2-14.6.C30mdk.x86_64.rpm 075732b125d63a6ec253113416033a30 corporate/3.0/x86_64/tetex-devel-2.0.2-14.6.C30mdk.x86_64.rpm 18bde348dc1e27fe6f7920e0c570b856 corporate/3.0/x86_64/tetex-doc-2.0.2-14.6.C30mdk.x86_64.rpm 1bef4166396e578ec54133a601a2acc0 corporate/3.0/x86_64/tetex-dvilj-2.0.2-14.6.C30mdk.x86_64.rpm 3ccb48aa3d73035b25442fad43c3972b corporate/3.0/x86_64/tetex-dvipdfm-2.0.2-14.6.C30mdk.x86_64.rpm e62237183d2cb28c322ccd33a8646381 corporate/3.0/x86_64/tetex-dvips-2.0.2-14.6.C30mdk.x86_64.rpm 3ca3a5aa3e3280281992dec9f70dc710 corporate/3.0/x86_64/tetex-latex-2.0.2-14.6.C30mdk.x86_64.rpm 03cf7ec5142b11c33149a09f56299bd4 corporate/3.0/x86_64/tetex-mfwin-2.0.2-14.6.C30mdk.x86_64.rpm 77bfb4e143bdfc9ea7be3a1369f3cf4b corporate/3.0/x86_64/tetex-texi2html-2.0.2-14.6.C30mdk.x86_64.rpm 063b58c4e01d03623400812c93cf3bdc corporate/3.0/x86_64/tetex-xdvi-2.0.2-14.6.C30mdk.x86_64.rpm 03f8d26d409b40b663bc9277b759e1d5 corporate/3.0/x86_64/xmltex-1.9-41.6.C30mdk.x86_64.rpm 72dd7067c3e01870a36c200dea46d98f corporate/3.0/SRPMS/tetex-2.0.2-14.6.C30mdk.src.rpm Corporate 4.0: 353c207f583bac4b97e9ed18ded74d49 corporate/4.0/i586/jadetex-3.12-110.4.20060mlcs4.i586.rpm 25dddb88ea4763663a141f6dbeddac01 corporate/4.0/i586/tetex-3.0-12.4.20060mlcs4.i586.rpm 6c0de20e1e40ce1879dc7f7928a0339f corporate/4.0/i586/tetex-afm-3.0-12.4.20060mlcs4.i586.rpm 1a292217bb3b93a9d3bd00ef03e88742 corporate/4.0/i586/tetex-context-3.0-12.4.20060mlcs4.i586.rpm 16d95f9c6eaf286a23b4774cfe5e0b85 corporate/4.0/i586/tetex-devel-3.0-12.4.20060mlcs4.i586.rpm 60125a1bf699d93cc6fa585361c16ef4 corporate/4.0/i586/tetex-doc-3.0-12.4.20060mlcs4.i586.rpm 1f0538ae84f8defbd02d7f7daee21154 corporate/4.0/i586/tetex-dvilj-3.0-12.4.20060mlcs4.i586.rpm 6ca2b40b5323af558c8d5c1d5389e505 corporate/4.0/i586/tetex-dvipdfm-3.0-12.4.20060mlcs4.i586.rpm 5df38c53bb5ffe84f248a6b0f55193d2 corporate/4.0/i586/tetex-dvips-3.0-12.4.20060mlcs4.i586.rpm 1feb7c32d5ce93353802bb49687d7af0 corporate/4.0/i586/tetex-latex-3.0-12.4.20060mlcs4.i586.rpm 1c4fbb7e6a2acaaffb818d0d9838f1f3 corporate/4.0/i586/tetex-mfwin-3.0-12.4.20060mlcs4.i586.rpm 86d4d0fb1bdb5aa140d5d9627fae682c corporate/4.0/i586/tetex-texi2html-3.0-12.4.20060mlcs4.i586.rpm 408cf29fccdc4ed33e1a530dfdaacdf0 corporate/4.0/i586/tetex-xdvi-3.0-12.4.20060mlcs4.i586.rpm 10bccc85c8752721bdaf21f1ebd62480 corporate/4.0/i586/xmltex-1.9-58.4.20060mlcs4.i586.rpm cb91a4f29611bfb2fd602bb780449088 corporate/4.0/SRPMS/tetex-3.0-12.4.20060mlcs4.src.rpm Corporate 4.0/X86_64: f3a1f2a77294feb65162f034b9df4964 corporate/4.0/x86_64/jadetex-3.12-110.4.20060mlcs4.x86_64.rpm 4330709943e85543b7d78c1339bb3830 corporate/4.0/x86_64/tetex-3.0-12.4.20060mlcs4.x86_64.rpm b4c0084e1ec7e3e5319622b02ced0291 corporate/4.0/x86_64/tetex-afm-3.0-12.4.20060mlcs4.x86_64.rpm dea7084c10404bc9d0ce25524e2403a6 corporate/4.0/x86_64/tetex-context-3.0-12.4.20060mlcs4.x86_64.rpm 96132bde53b53c26b217c977f2f1bf41 corporate/4.0/x86_64/tetex-devel-3.0-12.4.20060mlcs4.x86_64.rpm c0dc37849c4f64dbb456890446d1999b corporate/4.0/x86_64/tetex-doc-3.0-12.4.20060mlcs4.x86_64.rpm 938f1eea3ff14476bce05a522b5d1e16 corporate/4.0/x86_64/tetex-dvilj-3.0-12.4.20060mlcs4.x86_64.rpm 80637e21655ae7a4a2c00d368bbba408 corporate/4.0/x86_64/tetex-dvipdfm-3.0-12.4.20060mlcs4.x86_64.rpm 1ee92cdcd5379a78b676ac1a28e4a4be corporate/4.0/x86_64/tetex-dvips-3.0-12.4.20060mlcs4.x86_64.rpm 9a6cf9edef2a08eb6ed8a02156cdfef5 corporate/4.0/x86_64/tetex-latex-3.0-12.4.20060mlcs4.x86_64.rpm 141d05046ae1db25c51dfe66ec3f2831 corporate/4.0/x86_64/tetex-mfwin-3.0-12.4.20060mlcs4.x86_64.rpm 51a8a0e33e7dddb05127324463d4cd7f corporate/4.0/x86_64/tetex-texi2html-3.0-12.4.20060mlcs4.x86_64.rpm d0af2ea4888afcff162a03d2107295fb corporate/4.0/x86_64/tetex-xdvi-3.0-12.4.20060mlcs4.x86_64.rpm df253a5dd2d53370903fec7ee373618b corporate/4.0/x86_64/xmltex-1.9-58.4.20060mlcs4.x86_64.rpm cb91a4f29611bfb2fd602bb780449088 corporate/4.0/SRPMS/tetex-3.0-12.4.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGVMksmqjQ0CJFipgRAkWTAKCWgRWcpcIPEDTa+8u5LsBXJPoEtACgvQQ0 1b4REuc8HJHUoOeZmtSmv8M= =DyYa -----END PGP SIGNATURE-----
