(RHSA-2006:0160) tetex security update

2006-01-1900:00:00

access.redhat.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.184 Low

EPSS

Percentile

95.7%

JSON

TeTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input and creates a typesetter-independent .dvi
(DeVice Independent) file as output.

Several flaws were discovered in the teTeX PDF parsing library. An attacker
could construct a carefully crafted PDF file that could cause teTeX to
crash or possibly execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project assigned the names CVE-2005-3191,
CVE-2005-3192, CVE-2005-3193, CVE-2005-3624, CVE-2005-3625, CVE-2005-3626,
CVE-2005-3627 and CVE-2005-3628 to these issues.

Users of teTeX should upgrade to these updated packages, which contain
backported patches and are not vulnerable to these issues.

OSVersionArchitecturePackageVersionFilename
RedHatanyppctetex-latex< 1.0.7-67.9tetex-latex-1.0.7-67.9.ppc.rpm
RedHatanyia64tetex-doc< 1.0.7-38.5E.10tetex-doc-1.0.7-38.5E.10.ia64.rpm
RedHatanyia64tetex-dvips< 2.0.2-22.EL4.7tetex-dvips-2.0.2-22.EL4.7.ia64.rpm
RedHatanyi386tetex-fonts< 2.0.2-22.EL4.7tetex-fonts-2.0.2-22.EL4.7.i386.rpm
RedHatanys390xtetex-xdvi< 2.0.2-22.EL4.7tetex-xdvi-2.0.2-22.EL4.7.s390x.rpm
RedHatanyppctetex-afm< 2.0.2-22.EL4.7tetex-afm-2.0.2-22.EL4.7.ppc.rpm
RedHatanyi386tetex-latex< 1.0.7-67.9tetex-latex-1.0.7-67.9.i386.rpm
RedHatanyppctetex-dvips< 1.0.7-67.9tetex-dvips-1.0.7-67.9.ppc.rpm
RedHatanys390xtetex-doc< 2.0.2-22.EL4.7tetex-doc-2.0.2-22.EL4.7.s390x.rpm
RedHatanyi386tetex-dvilj< 1.0.7-38.5E.10tetex-dvilj-1.0.7-38.5E.10.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc	tetex-latex	< 1.0.7-67.9	tetex-latex-1.0.7-67.9.ppc.rpm
RedHat	any	ia64	tetex-doc	< 1.0.7-38.5E.10	tetex-doc-1.0.7-38.5E.10.ia64.rpm
RedHat	any	ia64	tetex-dvips	< 2.0.2-22.EL4.7	tetex-dvips-2.0.2-22.EL4.7.ia64.rpm
RedHat	any	i386	tetex-fonts	< 2.0.2-22.EL4.7	tetex-fonts-2.0.2-22.EL4.7.i386.rpm
RedHat	any	s390x	tetex-xdvi	< 2.0.2-22.EL4.7	tetex-xdvi-2.0.2-22.EL4.7.s390x.rpm
RedHat	any	ppc	tetex-afm	< 2.0.2-22.EL4.7	tetex-afm-2.0.2-22.EL4.7.ppc.rpm
RedHat	any	i386	tetex-latex	< 1.0.7-67.9	tetex-latex-1.0.7-67.9.i386.rpm
RedHat	any	ppc	tetex-dvips	< 1.0.7-67.9	tetex-dvips-1.0.7-67.9.ppc.rpm
RedHat	any	s390x	tetex-doc	< 2.0.2-22.EL4.7	tetex-doc-2.0.2-22.EL4.7.s390x.rpm
RedHat	any	i386	tetex-dvilj	< 1.0.7-38.5E.10	tetex-dvilj-1.0.7-38.5E.10.i386.rpm