Accepted tetex-bin 3.0-10.1ubuntu2 (source)
Martin Pitt
martin.pitt at ubuntu.com
Thu Dec 8 14:00:11 GMT 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 8 Dec 2005 14:43:56 +0100
Source: tetex-bin
Binary: tetex-bin libkpathsea4-dev libkpathsea4
Architecture: source
Version: 3.0-10.1ubuntu2
Distribution: dapper
Urgency: low
Maintainer: teTeX maintainers <debian-tetex-maint at lists.debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description:
libkpathsea4 - path search library for teTeX (runtime part)
libkpathsea4-dev - path search library for teTeX (devel part)
tetex-bin - The teTeX binary files
Changes:
tetex-bin (3.0-10.1ubuntu2) dapper; urgency=low
.
* SECURITY UPDATE: Multiple integer/buffer overflows in embedded xpdf code.
* Add debian/patches/patch-CVE-2005-3191+2+3.patch:
* xpdf/Stream.cc, DCTStream::readBaselineSOF():
- Check numComps for invalid values.
- http://www.idefense.com/application/poi/display?id=342&type=vulnerabilities
- CVE-2005-3191
* xpdf/Stream.cc, DCTStream::DCTStream::readProgressiveSOF():
- Check numComps for invalid values.
- http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities
- CVE-2005-3191
* xpdf/Stream.cc, StreamPredictor::StreamPredictor():
- Check rowBytes for invalid values.
- http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities
- CVE-2005-3192
* xpdf/JPXStream.cc, JPXStream::readCodestream():
- Check img.nXTiles * img.nYTiles for integer overflow.
- Check final gmalloc() for overflow.
- http://www.idefense.com/application/poi/display?id=345&type=vulnerabilities
- CVE-2005-3193
Files:
608fff71c34535d5d76934fd0cff53a6 983 tex optional tetex-bin_3.0-10.1ubuntu2.dsc
0bb43657a5b2e123fa04d8c8ced16049 317359 tex optional tetex-bin_3.0-10.1ubuntu2.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDmDkwDecnbV4Fd/IRAj5XAJ9JlZ7xxTGmq7LJTDe2TUt/Gr464ACgsEut
Nnx7u0c3wV+JdX/8+c3xThM=
=9yQE
-----END PGP SIGNATURE-----
Accepted:
tetex-bin_3.0-10.1ubuntu2.diff.gz
to pool/main/t/tetex-bin/tetex-bin_3.0-10.1ubuntu2.diff.gz
tetex-bin_3.0-10.1ubuntu2.dsc
to pool/main/t/tetex-bin/tetex-bin_3.0-10.1ubuntu2.dsc
More information about the dapper-changes
mailing list