Fedora Core 3: 2005-049 Moderate: teTeX xpdf Buffer Overflow

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes

a text file and a set of formatting commands as input and creates a

typesetter-independent .dvi (DeVice Independent) file as output.

Usually, TeX is used in conjunction with a higher level formatting

package like LaTeX or PlainTeX, since TeX by itself is not very

user-friendly.

Install tetex if you want to use the TeX text formatting system. If

you are installing tetex, you will also need to install tetex-afm (a

PostScript(TM) font converter for TeX),

tetex-dvips (for converting .dvi files to PostScript format

for printing on PostScript printers), tetex-latex (a higher level

formatting package which provides an easier-to-use interface for TeX),

and tetex-xdvi (for previewing .dvi files in X). Unless you are an

expert at using TeX, you should also install the tetex-doc package,

which includes the documentation for TeX.

Updated tetex package fixes another xpdf buffer overflow. The Common

Vulnerabilities and Exposures projects (cve.mitre.org) has assigned

the name CAN-2005-0064 to this issue.

- Fix CAN-2005-0064 xpdf buffer overflow.

1013d1d41217562378b60cda3c7b6031 SRPMS/tetex-2.0.2-21.3.src.rpm

a86d74d672c653790f11dccba1f32f63 x86_64/tetex-2.0.2-21.3.x86_64.rpm

556c17819f2be3368fca154e8a404d87 x86_64/tetex-latex-2.0.2-21.3.x86_64.rpm

0b41e98704158a43db72fa568e3d910d x86_64/tetex-xdvi-2.0.2-21.3.x86_64.rpm

006f35dcecd5500b520282c3a84253f6 x86_64/tetex-dvips-2.0.2-21.3.x86_64.rpm

18862ab8db06faf36b4768c3e8e1eacc x86_64/tetex-afm-2.0.2-21.3.x86_64.rpm

b5d5b08802521d383145dde7b6a0a69c x86_64/tetex-fonts-2.0.2-21.3.x86_64.rpm

92c82e513853c7be4eec7d07d7f77add x86_64/tetex-doc-2.0.2-21.3.x86_64.rpm

691720f393c360a0d95097e43b995ab3 x86_64/debug/tetex-debuginfo-2.0.2-21.3.x86_64.rpm

1b29b199bf30935ad3ea77a767f5345e i386/tetex-2.0.2-21.3.i386.rpm

ed4ad3a151fd7ce7cac9c86287b10907 i386/tetex-latex-2.0.2-21.3.i386.rpm

776d53385faef0649afedc769335bc97 i386/tetex-xdvi-2.0.2-21.3.i386.rpm

97735a829f7c0d7b5baff4e5932a86b1 i386/tetex-dvips-2.0.2-21.3.i386.rpm

9a352d41b67c540938a4a90270d46141 i386/tetex-afm-2.0.2-21.3.i386.rpm

eb14c77ba1a2fb94ec6622a41baaa635 i386/tetex-fonts-2.0.2-21.3.i386.rpm

a60c457bbca80fd08c3c210cafcc9429 i386/tetex-doc-2.0.2-21.3.i386.rpm

d4b366f6899214a6d94e11e6cca0a737 i386/debug/tetex-debuginfo-2.0.2-21.3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com