Technical Description

Multiple vulnerabilities have been identified in Fedora, which could be exploited by attackers or malicious users to execute arbitrary code or bypass security restrictions. These issues are caused by errors in teTeX. For additional information, see : VUPEN/ADV-2007-3896 - VUPEN/ADV-2007-3786 - VUPEN/ADV-2007-2721

Affected Products

Fedora 7
Fedora 8

Solution

Upgrade the affected packages :

92ec51994b53edc8e5bec1d6e24f37dfd15b824a tetex-fonts-3.0-40.3.fc7.ppc64.rpm
14b9f243e57555a73b5ca9abab28eaec30e3611a tetex-debuginfo-3.0-40.3.fc7.ppc64.rpm
54f30190c56cf01590df10751fc967f3bd54bb8e tetex-dvips-3.0-40.3.fc7.ppc64.rpm
076f7676a21881db34266f12f4435f726bced44c tetex-doc-3.0-40.3.fc7.ppc64.rpm
c12626a843afa0401c58cae6c5079e4d7cda4281 tetex-3.0-40.3.fc7.ppc64.rpm
c66519d7c2552597860591181a2a63e135b00e2b tetex-xdvi-3.0-40.3.fc7.ppc64.rpm
cb5deb9cb217e5728994686b4c1884a221361db7 tetex-afm-3.0-40.3.fc7.ppc64.rpm
7a2cbdf5f15ba8bc2150b4c773bf246c191d7c8e tetex-latex-3.0-40.3.fc7.ppc64.rpm
8b3b50f4f1135c553f10b0638a2f2ae77361914f tetex-3.0-40.3.fc7.i386.rpm
bd136a00615670707d34409e9a6d72ea6846703e tetex-dvips-3.0-40.3.fc7.i386.rpm
49a9f95b46e9e11fc05a4efd0aa7136a498747b6 tetex-debuginfo-3.0-40.3.fc7.i386.rpm
c67e2d8c4f82bdc809a8add30fb437a74ad44ffb tetex-afm-3.0-40.3.fc7.i386.rpm
f019fbb16ebab2f4517ec55cb7ecbdc0eaaa2a56 tetex-xdvi-3.0-40.3.fc7.i386.rpm
dfad534b486ab736e19d9a1afd0b26a6866c7c05 tetex-fonts-3.0-40.3.fc7.i386.rpm
5620efb92ac5a5ae50904880c5f28b23cf9ecc10 tetex-doc-3.0-40.3.fc7.i386.rpm
84c1e84607bd609c911771f1979c2bdd1f7568be tetex-latex-3.0-40.3.fc7.i386.rpm
91ef6ab89a22364c8b31b3eac83a2d2a555ff798 tetex-dvips-3.0-40.3.fc7.x86_64.rpm
00ce83c8ca1e06828d8a32a1a20b244bb5aa250d tetex-xdvi-3.0-40.3.fc7.x86_64.rpm
0e32b9c0aae7be8112af55b0f1e24161c296a8d4 tetex-fonts-3.0-40.3.fc7.x86_64.rpm
c829c46f9a01f5a8601a814bfd029b7af55c837e tetex-3.0-40.3.fc7.x86_64.rpm
f32a8c23bcdeb7f35830dc63cf71a2167fadbc30 tetex-latex-3.0-40.3.fc7.x86_64.rpm
aa0e659c4b21b66142cbfc542172963ea76c0159 tetex-doc-3.0-40.3.fc7.x86_64.rpm
c7cd648093222dd693fbac0ac6eb52aca4337d35 tetex-debuginfo-3.0-40.3.fc7.x86_64.rpm
5ccbc52e7cf2c2cce429691311f67a6b68f9c94b tetex-afm-3.0-40.3.fc7.x86_64.rpm
02b0cdb15b2d9ebd1b9b6bafd5f82e18c2f5a839 tetex-3.0-40.3.fc7.ppc.rpm
e1807d74496afe75eb19cc3ee9ab8734de365579 tetex-afm-3.0-40.3.fc7.ppc.rpm
c57d07cc485d885ecd0b8d17021649ee986e5bff tetex-fonts-3.0-40.3.fc7.ppc.rpm
ad988ab99aa5e0a4e4fa5f82ee4d4433f27c6a3c tetex-debuginfo-3.0-40.3.fc7.ppc.rpm
ce452fc6f30dd9ebddf6692310e3f953c83d5fff tetex-dvips-3.0-40.3.fc7.ppc.rpm
36567cee8c863dffbb2f23dce6c0a8def2bba2c8 tetex-latex-3.0-40.3.fc7.ppc.rpm
188517c735b51e2b97bd344941e391c804d1ef18 tetex-doc-3.0-40.3.fc7.ppc.rpm
9e187f8cf6ee5f1a365ab324ca805321aa3bd9e5 tetex-xdvi-3.0-40.3.fc7.ppc.rpm
5c9ea1ce583d691151bb2317af36b0f6ef7c6197 tetex-3.0-40.3.fc7.src.rpm

53e28dfdd6fefce452ccd5f5e5e128dfde631077 tetex-fonts-3.0-44.3.fc8.ppc64.rpm
d8d6742c1eae9b613eacfcec8f85e544a2b0919f tetex-afm-3.0-44.3.fc8.ppc64.rpm
725dec3711cfdf06f9ff49165a33a39cab0be83b tetex-xdvi-3.0-44.3.fc8.ppc64.rpm
cca0d0dce90638b2c36fd0e23d9f8894244c9fb9 tetex-debuginfo-3.0-44.3.fc8.ppc64.rpm
170437b7ec175dadf12575fe0b2c896f002b3a4f tetex-dvips-3.0-44.3.fc8.ppc64.rpm
eff680a8982557241a1a42b9b7cd7bd9ecc675eb tetex-latex-3.0-44.3.fc8.ppc64.rpm
92749f7b01ab67f8a6ff589212e2a0c76dd98a6c tetex-doc-3.0-44.3.fc8.ppc64.rpm
c0f547436c04042982272ddde06d9d75f7436898 tetex-3.0-44.3.fc8.ppc64.rpm
084180bdcce7b5e29fe544ff6b9a84ccd809d8de tetex-latex-3.0-44.3.fc8.i386.rpm
8ab6010c7c308600aef3146b2fc4d32e80e4ae1f tetex-debuginfo-3.0-44.3.fc8.i386.rpm
263b17ce108880e452d7432c6a9849d07976eaa7 tetex-3.0-44.3.fc8.i386.rpm
1bc4b6ce752553572135ff06ae623971221079ff tetex-dvips-3.0-44.3.fc8.i386.rpm
db7049f25c25f1dd510b996901117f3e7c3f93e0 tetex-xdvi-3.0-44.3.fc8.i386.rpm
98777f8c0169862e484280e16d8c3cdf9ecd27fb tetex-fonts-3.0-44.3.fc8.i386.rpm
d2c269aadce92cc1b24098b4c0a16b0cb790d00f tetex-doc-3.0-44.3.fc8.i386.rpm
6dda49a6b3dde94b9515d28767e1c087976d5da4 tetex-afm-3.0-44.3.fc8.i386.rpm
70cfdb8e7f23bd20dcd4d80d71fb4fd6126d4863 tetex-afm-3.0-44.3.fc8.x86_64.rpm
e442dcf76c2cc1f44e3670ed85350fd27e1f1d85 tetex-doc-3.0-44.3.fc8.x86_64.rpm
f84f4608281b87a193a913022c281ba8a1868357 tetex-debuginfo-3.0-44.3.fc8.x86_64.rpm
f0a238114a1b9419f7d44b9c16963115483d8e2d tetex-dvips-3.0-44.3.fc8.x86_64.rpm
e6e0ea29d900bf6031adbe5af2e48c98fde5c73f tetex-fonts-3.0-44.3.fc8.x86_64.rpm
2f23524179584ce43f13ad928c197c127c56b43c tetex-latex-3.0-44.3.fc8.x86_64.rpm
2fd9e736d469d34b11f923161b4f75f935755d2c tetex-xdvi-3.0-44.3.fc8.x86_64.rpm
4fb56c7df2d785282866a7b938800ed3cf29f0e6 tetex-3.0-44.3.fc8.x86_64.rpm
76bf73ae24c3007c589def54262aada1e02a9d7e tetex-dvips-3.0-44.3.fc8.ppc.rpm
f75e2804b7543e1e586fb3f076711c2f9863e018 tetex-latex-3.0-44.3.fc8.ppc.rpm
23b7f04c55e77057d43650a6a7db864398140b70 tetex-xdvi-3.0-44.3.fc8.ppc.rpm
308b2c8d03c6a8018e0a7f8c36969ab6084bc8c6 tetex-fonts-3.0-44.3.fc8.ppc.rpm
52743a815a81caa40bc1da8cda644cd4bdcfe4f6 tetex-afm-3.0-44.3.fc8.ppc.rpm
54729723593e9bdf706ff231b4a783393851fab4 tetex-doc-3.0-44.3.fc8.ppc.rpm
765e74f9e1681405411508c170a8d71805cbcc09 tetex-debuginfo-3.0-44.3.fc8.ppc.rpm
74fe2afddadb4b2f938f7fb8a1f9eb824c6d4ea6 tetex-3.0-44.3.fc8.ppc.rpm
c86baf96de4f9bdbcb4c4509859fb9c100c49714 tetex-3.0-44.3.fc8.src.rpm

References

http://www.vupen.com/english/advisories/2007/3948
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00683.html

ChangeLog

2007-11-21 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.