drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in tetex
Name: |
Ausführen beliebiger Kommandos in tetex |
|
ID: |
RHSA-2007:1028-01 |
|
Distribution: |
Red Hat |
|
Plattformen: |
Red Hat Enterprise Linux |
|
Datum: |
Mi, 7. November 2007, 20:21 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393 |
|
Applikationen: |
teTeX |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- --------------------------------------------------------------------- Red Hat Security Advisory
Synopsis: Important: tetex security update Advisory ID: RHSA-2007:1028-01 Advisory URL: https://rhn.redhat.com/errata/RHSA-2007-1028.html Issue date: 2007-11-07 Updated on: 2007-11-07 Product: Red Hat Enterprise Linux CVE Names: CVE-2007-5393 - ---------------------------------------------------------------------
1. Summary:
Updated tetex packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3.
This update has been rated as having important security impact by the Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux WS version 2.1 - i386 Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
3. Problem description:
TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent (dvi) file as output.
Alin Rad Pop discovered a flaw in the handling of PDF files. An attacker could create a malicious PDF file that would cause TeTeX to crash, or potentially execute arbitrary code when opened. (CVE-2007-5393)
Users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.
4. Solution:
Before applying this update, make sure that all previously-released errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
5. Bug IDs fixed (http://bugzilla.redhat.com/):
345121 - CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()
6. RPMs required:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 :
SRPMS: tetex-1.0.7-38.5E.12.src.rpm a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
i386: cd1bdbe1b8abb51edc4bdad77db33f7b tetex-1.0.7-38.5E.12.i386.rpm 0a20e9a986c097a84fda16e6eff43087 tetex-afm-1.0.7-38.5E.12.i386.rpm e274eeb425bf5f9a0de80d2f864746a7 tetex-doc-1.0.7-38.5E.12.i386.rpm c64a654ae3d47604690790c4b5879f2f tetex-dvilj-1.0.7-38.5E.12.i386.rpm fe7648c4e4304f9ed65fe00038752341 tetex-dvips-1.0.7-38.5E.12.i386.rpm 446cb180d0e909594eb99f7dfa64bc77 tetex-fonts-1.0.7-38.5E.12.i386.rpm b6973422f0f349d9d72d97a038ada611 tetex-latex-1.0.7-38.5E.12.i386.rpm 4140df46de0a89b50d465d1cd9086363 tetex-xdvi-1.0.7-38.5E.12.i386.rpm
ia64: 7a5a40f2085ea2091752619040f27de7 tetex-1.0.7-38.5E.12.ia64.rpm e483ac8983a0b446d412aeaa8d429369 tetex-afm-1.0.7-38.5E.12.ia64.rpm 6bcfc102d17b2c50bd31606115ffc9ac tetex-doc-1.0.7-38.5E.12.ia64.rpm c1f55c0de9eb92f00cbaeb328e074c88 tetex-dvilj-1.0.7-38.5E.12.ia64.rpm f040436251a09cc62ac3b2f88cce243e tetex-dvips-1.0.7-38.5E.12.ia64.rpm 1513df82cd2191e5aefbca3a0f1103e0 tetex-fonts-1.0.7-38.5E.12.ia64.rpm 722cf2363da00e1bf627507652c45f55 tetex-latex-1.0.7-38.5E.12.ia64.rpm 4b131e2abf9b590ae8748761032d6970 tetex-xdvi-1.0.7-38.5E.12.ia64.rpm
Red Hat Linux Advanced Workstation 2.1:
SRPMS: tetex-1.0.7-38.5E.12.src.rpm a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
ia64: 7a5a40f2085ea2091752619040f27de7 tetex-1.0.7-38.5E.12.ia64.rpm e483ac8983a0b446d412aeaa8d429369 tetex-afm-1.0.7-38.5E.12.ia64.rpm 6bcfc102d17b2c50bd31606115ffc9ac tetex-doc-1.0.7-38.5E.12.ia64.rpm c1f55c0de9eb92f00cbaeb328e074c88 tetex-dvilj-1.0.7-38.5E.12.ia64.rpm f040436251a09cc62ac3b2f88cce243e tetex-dvips-1.0.7-38.5E.12.ia64.rpm 1513df82cd2191e5aefbca3a0f1103e0 tetex-fonts-1.0.7-38.5E.12.ia64.rpm 722cf2363da00e1bf627507652c45f55 tetex-latex-1.0.7-38.5E.12.ia64.rpm 4b131e2abf9b590ae8748761032d6970 tetex-xdvi-1.0.7-38.5E.12.ia64.rpm
Red Hat Enterprise Linux ES version 2.1:
SRPMS: tetex-1.0.7-38.5E.12.src.rpm a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
i386: cd1bdbe1b8abb51edc4bdad77db33f7b tetex-1.0.7-38.5E.12.i386.rpm 0a20e9a986c097a84fda16e6eff43087 tetex-afm-1.0.7-38.5E.12.i386.rpm e274eeb425bf5f9a0de80d2f864746a7 tetex-doc-1.0.7-38.5E.12.i386.rpm c64a654ae3d47604690790c4b5879f2f tetex-dvilj-1.0.7-38.5E.12.i386.rpm fe7648c4e4304f9ed65fe00038752341 tetex-dvips-1.0.7-38.5E.12.i386.rpm 446cb180d0e909594eb99f7dfa64bc77 tetex-fonts-1.0.7-38.5E.12.i386.rpm b6973422f0f349d9d72d97a038ada611 tetex-latex-1.0.7-38.5E.12.i386.rpm 4140df46de0a89b50d465d1cd9086363 tetex-xdvi-1.0.7-38.5E.12.i386.rpm
Red Hat Enterprise Linux WS version 2.1:
SRPMS: tetex-1.0.7-38.5E.12.src.rpm a9a330b6cc61c210c8fa38e555cc5109 tetex-1.0.7-38.5E.12.src.rpm
i386: cd1bdbe1b8abb51edc4bdad77db33f7b tetex-1.0.7-38.5E.12.i386.rpm 0a20e9a986c097a84fda16e6eff43087 tetex-afm-1.0.7-38.5E.12.i386.rpm e274eeb425bf5f9a0de80d2f864746a7 tetex-doc-1.0.7-38.5E.12.i386.rpm c64a654ae3d47604690790c4b5879f2f tetex-dvilj-1.0.7-38.5E.12.i386.rpm fe7648c4e4304f9ed65fe00038752341 tetex-dvips-1.0.7-38.5E.12.i386.rpm 446cb180d0e909594eb99f7dfa64bc77 tetex-fonts-1.0.7-38.5E.12.i386.rpm b6973422f0f349d9d72d97a038ada611 tetex-latex-1.0.7-38.5E.12.i386.rpm 4140df46de0a89b50d465d1cd9086363 tetex-xdvi-1.0.7-38.5E.12.i386.rpm
Red Hat Enterprise Linux AS version 3:
SRPMS: ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm 9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386: 258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm 30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm 0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm 880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
ia64: ae5fbbb76abeaa6d54d346c0faf200e8 tetex-1.0.7-67.11.ia64.rpm 4173b80aa25be5e0305f7b1dd1c3439f tetex-afm-1.0.7-67.11.ia64.rpm 8809c8ce4857c19b829e9a7a06e05ba4 tetex-debuginfo-1.0.7-67.11.ia64.rpm fd8d4b9cd499b1564efd83b0dcbf3441 tetex-dvips-1.0.7-67.11.ia64.rpm 51f9d66ecaba190afa9215cc9a63ac34 tetex-fonts-1.0.7-67.11.ia64.rpm 91e61d93242483f4512f3bba288b2d3f tetex-latex-1.0.7-67.11.ia64.rpm 08c93511d76ff339ec2f9c864c9c8205 tetex-xdvi-1.0.7-67.11.ia64.rpm
ppc: fba905be4b16011b872c8ffc0b213a50 tetex-1.0.7-67.11.ppc.rpm 10e9a154cf12630d99b716844c00ca91 tetex-afm-1.0.7-67.11.ppc.rpm c656abb71fcd8ec9a12913e09b605aa5 tetex-debuginfo-1.0.7-67.11.ppc.rpm a5482c9211715866705e215a830738e6 tetex-dvips-1.0.7-67.11.ppc.rpm a10414192f9c526021017138e70ca725 tetex-fonts-1.0.7-67.11.ppc.rpm a4ffc0fa998c219669e068b19cdb1552 tetex-latex-1.0.7-67.11.ppc.rpm cdc07fc8b8ab169299b39b500835817d tetex-xdvi-1.0.7-67.11.ppc.rpm
s390: 78cc3f0afc063dfbe6afb09018cba87d tetex-1.0.7-67.11.s390.rpm 72bf0382e1817f2f0f5f3050b42a35f5 tetex-afm-1.0.7-67.11.s390.rpm 29464cdf28c782db83de87d4b89ee0e6 tetex-debuginfo-1.0.7-67.11.s390.rpm 883bea76b18b42b3ef7052e6fcb0fae2 tetex-dvips-1.0.7-67.11.s390.rpm cee97ddea1d562f969b300dec55d8047 tetex-fonts-1.0.7-67.11.s390.rpm b2af293e49a1353abe3f7346c492d435 tetex-latex-1.0.7-67.11.s390.rpm 36a23c2e9cfdfe8abe8236c68b1b7ff3 tetex-xdvi-1.0.7-67.11.s390.rpm
s390x: 47bc340dd814ba4aefeb616b5914a9fc tetex-1.0.7-67.11.s390x.rpm f06c85101364e68dae12e423f49c6ae0 tetex-afm-1.0.7-67.11.s390x.rpm 9e441fc9a775fd5af5bdcbac34d57be8 tetex-debuginfo-1.0.7-67.11.s390x.rpm 93ec176639dd1381b8089d259b722971 tetex-dvips-1.0.7-67.11.s390x.rpm 4399413b190538d5ae6eae47fa30daef tetex-fonts-1.0.7-67.11.s390x.rpm 20756ec098a68f83e7ac5d2b6a4e96ff tetex-latex-1.0.7-67.11.s390x.rpm 111bdc122a8dc1d3baa742aa636d8085 tetex-xdvi-1.0.7-67.11.s390x.rpm
x86_64: 031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm 3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm 745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm 9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
Red Hat Desktop version 3:
SRPMS: tetex-1.0.7-67.11.src.rpm 9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386: 258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm 30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm 0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm 880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
x86_64: 031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm 3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm 745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm 9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
SRPMS: ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm 9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386: 258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm 30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm 0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm 880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
ia64: ae5fbbb76abeaa6d54d346c0faf200e8 tetex-1.0.7-67.11.ia64.rpm 4173b80aa25be5e0305f7b1dd1c3439f tetex-afm-1.0.7-67.11.ia64.rpm 8809c8ce4857c19b829e9a7a06e05ba4 tetex-debuginfo-1.0.7-67.11.ia64.rpm fd8d4b9cd499b1564efd83b0dcbf3441 tetex-dvips-1.0.7-67.11.ia64.rpm 51f9d66ecaba190afa9215cc9a63ac34 tetex-fonts-1.0.7-67.11.ia64.rpm 91e61d93242483f4512f3bba288b2d3f tetex-latex-1.0.7-67.11.ia64.rpm 08c93511d76ff339ec2f9c864c9c8205 tetex-xdvi-1.0.7-67.11.ia64.rpm
x86_64: 031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm 3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm 745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm 9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
Red Hat Enterprise Linux WS version 3:
SRPMS: ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/tetex-1.0.7-67.11.src.rpm 9c926f0b59265f222d3a6a92d070c7ab tetex-1.0.7-67.11.src.rpm
i386: 258e91388fdacfe82502653c5a48a005 tetex-1.0.7-67.11.i386.rpm 30f0d8f59f69c81cc14ba36a8fd7d370 tetex-afm-1.0.7-67.11.i386.rpm d560c78fa7e348e191ca6cd8cfaf0e97 tetex-debuginfo-1.0.7-67.11.i386.rpm 0ffd7b214e9e94df866c079f6dbb8e03 tetex-dvips-1.0.7-67.11.i386.rpm f3f75f29e7bfb42c734d0c08dcbae419 tetex-fonts-1.0.7-67.11.i386.rpm c7e9566382958a5b60a1be7dc5c9f8ff tetex-latex-1.0.7-67.11.i386.rpm 880b031da9a0d1d0dd862f70b49895d7 tetex-xdvi-1.0.7-67.11.i386.rpm
ia64: ae5fbbb76abeaa6d54d346c0faf200e8 tetex-1.0.7-67.11.ia64.rpm 4173b80aa25be5e0305f7b1dd1c3439f tetex-afm-1.0.7-67.11.ia64.rpm 8809c8ce4857c19b829e9a7a06e05ba4 tetex-debuginfo-1.0.7-67.11.ia64.rpm fd8d4b9cd499b1564efd83b0dcbf3441 tetex-dvips-1.0.7-67.11.ia64.rpm 51f9d66ecaba190afa9215cc9a63ac34 tetex-fonts-1.0.7-67.11.ia64.rpm 91e61d93242483f4512f3bba288b2d3f tetex-latex-1.0.7-67.11.ia64.rpm 08c93511d76ff339ec2f9c864c9c8205 tetex-xdvi-1.0.7-67.11.ia64.rpm
x86_64: 031f9772ca3dc02bf3c54556dd1f3937 tetex-1.0.7-67.11.x86_64.rpm e40304314a03120ac8446d1dc7741e0c tetex-afm-1.0.7-67.11.x86_64.rpm 3d8409cf75af9fc0d3d91e33bf3b1ca5 tetex-debuginfo-1.0.7-67.11.x86_64.rpm d0ab503ede80d4c9eb0db09db7fa40c3 tetex-dvips-1.0.7-67.11.x86_64.rpm f03a734922e40634670c24ea48f67d37 tetex-fonts-1.0.7-67.11.x86_64.rpm 745531fdc58aa0b1eed829b632970fb7 tetex-latex-1.0.7-67.11.x86_64.rpm 9a5268aeae9f73948011c5d17089ceae tetex-xdvi-1.0.7-67.11.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393 http://www.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact details at https://www.redhat.com/security/team/contact/
Copyright 2007 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFHMgdkXlSAg2UNWIIRAo3XAJ4kUhx/k6VSRffZRJLTwOkx7uPCWwCgg0OD OhxpjfcIzWpVM0OYF6HmTCo= =/T4a -----END PGP SIGNATURE-----
-- Enterprise-watch-list mailing list Enterprise-watch-list@redhat.com https://www.redhat.com/mailman/listinfo/enterprise-watch-list
|
|
|
|