- ---------------------------------------------------------------------                   Red Hat Security Advisory

Synopsis:          Important: tetex security update
Advisory ID:       RHSA-2007:1028-01
Advisory URL:      https://access.redhat.com/errata/RHSA-2007:1028.html
Issue date:        2007-11-07
Updated on:        2007-11-07
Product:           Red Hat Enterprise Linux
CVE Names:         CVE-2007-5393 
- ---------------------------------------------------------------------1. Summary:

Updated tetex packages that fix a security issue are now available for Red
Hat Enterprise Linux 2.1 and 3.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1  - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

3. Problem description:

TeTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input, and creates a typesetter-independent DeVice
Independent (dvi) file as output.

Alin Rad Pop discovered a flaw in the handling of PDF files. An attacker
could create a malicious PDF file that would cause TeTeX to crash, or
potentially execute arbitrary code when opened. (CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain
backported patches to resolve these issues.

4. Solution:

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at

5. Bug IDs fixed (http://bugzilla.redhat.com/):

345121 - CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 :

SRPMS:
a9a330b6cc61c210c8fa38e555cc5109  tetex-1.0.7-38.5E.12.src.rpm

i386:
cd1bdbe1b8abb51edc4bdad77db33f7b  tetex-1.0.7-38.5E.12.i386.rpm
0a20e9a986c097a84fda16e6eff43087  tetex-afm-1.0.7-38.5E.12.i386.rpm
e274eeb425bf5f9a0de80d2f864746a7  tetex-doc-1.0.7-38.5E.12.i386.rpm
c64a654ae3d47604690790c4b5879f2f  tetex-dvilj-1.0.7-38.5E.12.i386.rpm
fe7648c4e4304f9ed65fe00038752341  tetex-dvips-1.0.7-38.5E.12.i386.rpm
446cb180d0e909594eb99f7dfa64bc77  tetex-fonts-1.0.7-38.5E.12.i386.rpm
b6973422f0f349d9d72d97a038ada611  tetex-latex-1.0.7-38.5E.12.i386.rpm
4140df46de0a89b50d465d1cd9086363  tetex-xdvi-1.0.7-38.5E.12.i386.rpm

ia64:
7a5a40f2085ea2091752619040f27de7  tetex-1.0.7-38.5E.12.ia64.rpm
e483ac8983a0b446d412aeaa8d429369  tetex-afm-1.0.7-38.5E.12.ia64.rpm
6bcfc102d17b2c50bd31606115ffc9ac  tetex-doc-1.0.7-38.5E.12.ia64.rpm
c1f55c0de9eb92f00cbaeb328e074c88  tetex-dvilj-1.0.7-38.5E.12.ia64.rpm
f040436251a09cc62ac3b2f88cce243e  tetex-dvips-1.0.7-38.5E.12.ia64.rpm
1513df82cd2191e5aefbca3a0f1103e0  tetex-fonts-1.0.7-38.5E.12.ia64.rpm
722cf2363da00e1bf627507652c45f55  tetex-latex-1.0.7-38.5E.12.ia64.rpm
4b131e2abf9b590ae8748761032d6970  tetex-xdvi-1.0.7-38.5E.12.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:
a9a330b6cc61c210c8fa38e555cc5109  tetex-1.0.7-38.5E.12.src.rpm

ia64:
7a5a40f2085ea2091752619040f27de7  tetex-1.0.7-38.5E.12.ia64.rpm
e483ac8983a0b446d412aeaa8d429369  tetex-afm-1.0.7-38.5E.12.ia64.rpm
6bcfc102d17b2c50bd31606115ffc9ac  tetex-doc-1.0.7-38.5E.12.ia64.rpm
c1f55c0de9eb92f00cbaeb328e074c88  tetex-dvilj-1.0.7-38.5E.12.ia64.rpm
f040436251a09cc62ac3b2f88cce243e  tetex-dvips-1.0.7-38.5E.12.ia64.rpm
1513df82cd2191e5aefbca3a0f1103e0  tetex-fonts-1.0.7-38.5E.12.ia64.rpm
722cf2363da00e1bf627507652c45f55  tetex-latex-1.0.7-38.5E.12.ia64.rpm
4b131e2abf9b590ae8748761032d6970  tetex-xdvi-1.0.7-38.5E.12.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS:
a9a330b6cc61c210c8fa38e555cc5109  tetex-1.0.7-38.5E.12.src.rpm

i386:
cd1bdbe1b8abb51edc4bdad77db33f7b  tetex-1.0.7-38.5E.12.i386.rpm
0a20e9a986c097a84fda16e6eff43087  tetex-afm-1.0.7-38.5E.12.i386.rpm
e274eeb425bf5f9a0de80d2f864746a7  tetex-doc-1.0.7-38.5E.12.i386.rpm
c64a654ae3d47604690790c4b5879f2f  tetex-dvilj-1.0.7-38.5E.12.i386.rpm
fe7648c4e4304f9ed65fe00038752341  tetex-dvips-1.0.7-38.5E.12.i386.rpm
446cb180d0e909594eb99f7dfa64bc77  tetex-fonts-1.0.7-38.5E.12.i386.rpm
b6973422f0f349d9d72d97a038ada611  tetex-latex-1.0.7-38.5E.12.i386.rpm
4140df46de0a89b50d465d1cd9086363  tetex-xdvi-1.0.7-38.5E.12.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:
a9a330b6cc61c210c8fa38e555cc5109  tetex-1.0.7-38.5E.12.src.rpm

i386:
cd1bdbe1b8abb51edc4bdad77db33f7b  tetex-1.0.7-38.5E.12.i386.rpm
0a20e9a986c097a84fda16e6eff43087  tetex-afm-1.0.7-38.5E.12.i386.rpm
e274eeb425bf5f9a0de80d2f864746a7  tetex-doc-1.0.7-38.5E.12.i386.rpm
c64a654ae3d47604690790c4b5879f2f  tetex-dvilj-1.0.7-38.5E.12.i386.rpm
fe7648c4e4304f9ed65fe00038752341  tetex-dvips-1.0.7-38.5E.12.i386.rpm
446cb180d0e909594eb99f7dfa64bc77  tetex-fonts-1.0.7-38.5E.12.i386.rpm
b6973422f0f349d9d72d97a038ada611  tetex-latex-1.0.7-38.5E.12.i386.rpm
4140df46de0a89b50d465d1cd9086363  tetex-xdvi-1.0.7-38.5E.12.i386.rpm

Red Hat Enterprise Linux AS version 3:

SRPMS:
9c926f0b59265f222d3a6a92d070c7ab  tetex-1.0.7-67.11.src.rpm

i386:
258e91388fdacfe82502653c5a48a005  tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370  tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97  tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03  tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419  tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff  tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7  tetex-xdvi-1.0.7-67.11.i386.rpm

ia64:
ae5fbbb76abeaa6d54d346c0faf200e8  tetex-1.0.7-67.11.ia64.rpm
4173b80aa25be5e0305f7b1dd1c3439f  tetex-afm-1.0.7-67.11.ia64.rpm
8809c8ce4857c19b829e9a7a06e05ba4  tetex-debuginfo-1.0.7-67.11.ia64.rpm
fd8d4b9cd499b1564efd83b0dcbf3441  tetex-dvips-1.0.7-67.11.ia64.rpm
51f9d66ecaba190afa9215cc9a63ac34  tetex-fonts-1.0.7-67.11.ia64.rpm
91e61d93242483f4512f3bba288b2d3f  tetex-latex-1.0.7-67.11.ia64.rpm
08c93511d76ff339ec2f9c864c9c8205  tetex-xdvi-1.0.7-67.11.ia64.rpm

ppc:
fba905be4b16011b872c8ffc0b213a50  tetex-1.0.7-67.11.ppc.rpm
10e9a154cf12630d99b716844c00ca91  tetex-afm-1.0.7-67.11.ppc.rpm
c656abb71fcd8ec9a12913e09b605aa5  tetex-debuginfo-1.0.7-67.11.ppc.rpm
a5482c9211715866705e215a830738e6  tetex-dvips-1.0.7-67.11.ppc.rpm
a10414192f9c526021017138e70ca725  tetex-fonts-1.0.7-67.11.ppc.rpm
a4ffc0fa998c219669e068b19cdb1552  tetex-latex-1.0.7-67.11.ppc.rpm
cdc07fc8b8ab169299b39b500835817d  tetex-xdvi-1.0.7-67.11.ppc.rpm

s390:
78cc3f0afc063dfbe6afb09018cba87d  tetex-1.0.7-67.11.s390.rpm
72bf0382e1817f2f0f5f3050b42a35f5  tetex-afm-1.0.7-67.11.s390.rpm
29464cdf28c782db83de87d4b89ee0e6  tetex-debuginfo-1.0.7-67.11.s390.rpm
883bea76b18b42b3ef7052e6fcb0fae2  tetex-dvips-1.0.7-67.11.s390.rpm
cee97ddea1d562f969b300dec55d8047  tetex-fonts-1.0.7-67.11.s390.rpm
b2af293e49a1353abe3f7346c492d435  tetex-latex-1.0.7-67.11.s390.rpm
36a23c2e9cfdfe8abe8236c68b1b7ff3  tetex-xdvi-1.0.7-67.11.s390.rpm

s390x:
47bc340dd814ba4aefeb616b5914a9fc  tetex-1.0.7-67.11.s390x.rpm
f06c85101364e68dae12e423f49c6ae0  tetex-afm-1.0.7-67.11.s390x.rpm
9e441fc9a775fd5af5bdcbac34d57be8  tetex-debuginfo-1.0.7-67.11.s390x.rpm
93ec176639dd1381b8089d259b722971  tetex-dvips-1.0.7-67.11.s390x.rpm
4399413b190538d5ae6eae47fa30daef  tetex-fonts-1.0.7-67.11.s390x.rpm
20756ec098a68f83e7ac5d2b6a4e96ff  tetex-latex-1.0.7-67.11.s390x.rpm
111bdc122a8dc1d3baa742aa636d8085  tetex-xdvi-1.0.7-67.11.s390x.rpm

x86_64:
031f9772ca3dc02bf3c54556dd1f3937  tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c  tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5  tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3  tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37  tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7  tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae  tetex-xdvi-1.0.7-67.11.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:
9c926f0b59265f222d3a6a92d070c7ab  tetex-1.0.7-67.11.src.rpm

i386:
258e91388fdacfe82502653c5a48a005  tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370  tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97  tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03  tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419  tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff  tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7  tetex-xdvi-1.0.7-67.11.i386.rpm

x86_64:
031f9772ca3dc02bf3c54556dd1f3937  tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c  tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5  tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3  tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37  tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7  tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae  tetex-xdvi-1.0.7-67.11.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:
9c926f0b59265f222d3a6a92d070c7ab  tetex-1.0.7-67.11.src.rpm

i386:
258e91388fdacfe82502653c5a48a005  tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370  tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97  tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03  tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419  tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff  tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7  tetex-xdvi-1.0.7-67.11.i386.rpm

ia64:
ae5fbbb76abeaa6d54d346c0faf200e8  tetex-1.0.7-67.11.ia64.rpm
4173b80aa25be5e0305f7b1dd1c3439f  tetex-afm-1.0.7-67.11.ia64.rpm
8809c8ce4857c19b829e9a7a06e05ba4  tetex-debuginfo-1.0.7-67.11.ia64.rpm
fd8d4b9cd499b1564efd83b0dcbf3441  tetex-dvips-1.0.7-67.11.ia64.rpm
51f9d66ecaba190afa9215cc9a63ac34  tetex-fonts-1.0.7-67.11.ia64.rpm
91e61d93242483f4512f3bba288b2d3f  tetex-latex-1.0.7-67.11.ia64.rpm
08c93511d76ff339ec2f9c864c9c8205  tetex-xdvi-1.0.7-67.11.ia64.rpm

x86_64:
031f9772ca3dc02bf3c54556dd1f3937  tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c  tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5  tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3  tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37  tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7  tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae  tetex-xdvi-1.0.7-67.11.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:
9c926f0b59265f222d3a6a92d070c7ab  tetex-1.0.7-67.11.src.rpm

i386:
258e91388fdacfe82502653c5a48a005  tetex-1.0.7-67.11.i386.rpm
30f0d8f59f69c81cc14ba36a8fd7d370  tetex-afm-1.0.7-67.11.i386.rpm
d560c78fa7e348e191ca6cd8cfaf0e97  tetex-debuginfo-1.0.7-67.11.i386.rpm
0ffd7b214e9e94df866c079f6dbb8e03  tetex-dvips-1.0.7-67.11.i386.rpm
f3f75f29e7bfb42c734d0c08dcbae419  tetex-fonts-1.0.7-67.11.i386.rpm
c7e9566382958a5b60a1be7dc5c9f8ff  tetex-latex-1.0.7-67.11.i386.rpm
880b031da9a0d1d0dd862f70b49895d7  tetex-xdvi-1.0.7-67.11.i386.rpm

ia64:
ae5fbbb76abeaa6d54d346c0faf200e8  tetex-1.0.7-67.11.ia64.rpm
4173b80aa25be5e0305f7b1dd1c3439f  tetex-afm-1.0.7-67.11.ia64.rpm
8809c8ce4857c19b829e9a7a06e05ba4  tetex-debuginfo-1.0.7-67.11.ia64.rpm
fd8d4b9cd499b1564efd83b0dcbf3441  tetex-dvips-1.0.7-67.11.ia64.rpm
51f9d66ecaba190afa9215cc9a63ac34  tetex-fonts-1.0.7-67.11.ia64.rpm
91e61d93242483f4512f3bba288b2d3f  tetex-latex-1.0.7-67.11.ia64.rpm
08c93511d76ff339ec2f9c864c9c8205  tetex-xdvi-1.0.7-67.11.ia64.rpm

x86_64:
031f9772ca3dc02bf3c54556dd1f3937  tetex-1.0.7-67.11.x86_64.rpm
e40304314a03120ac8446d1dc7741e0c  tetex-afm-1.0.7-67.11.x86_64.rpm
3d8409cf75af9fc0d3d91e33bf3b1ca5  tetex-debuginfo-1.0.7-67.11.x86_64.rpm
d0ab503ede80d4c9eb0db09db7fa40c3  tetex-dvips-1.0.7-67.11.x86_64.rpm
f03a734922e40634670c24ea48f67d37  tetex-fonts-1.0.7-67.11.x86_64.rpm
745531fdc58aa0b1eed829b632970fb7  tetex-latex-1.0.7-67.11.x86_64.rpm
9a5268aeae9f73948011c5d17089ceae  tetex-xdvi-1.0.7-67.11.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393
http://www.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is .  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2007 Red Hat, Inc.