==========================================================Ubuntu Security Notice USN-937-1               May 06, 2010
texlive-bin vulnerabilities
CVE-2009-1284, CVE-2010-0739, CVE-2010-0827, CVE-2010-1440
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  texlive-base-bin                2007.dfsg.1-2ubuntu0.1

Ubuntu 9.04:
  texlive-base-bin                2007.dfsg.2-4ubuntu2.1

Ubuntu 9.10:
  texlive-base-bin                2007.dfsg.2-7ubuntu1.1

Ubuntu 10.04 LTS:
  texlive-binaries                2009-5ubuntu0.1

In general, a standard system update will make all the necessary changes.

Details follow:

It was discovered that TeX Live incorrectly handled certain long .bib
bibliography files. If a user or automated system were tricked into
processing a specially crafted bib file, an attacker could cause a denial
of service via application crash. This issue only affected Ubuntu 8.04 LTS,
9.04 and 9.10. (CVE-2009-1284)

Marc Schoenefeld, Karel Šrot and Ludwig Nussel discovered that TeX Live
incorrectly handled certain malformed dvi files. If a user or automated
system were tricked into processing a specially crafted dvi file, an
attacker could cause a denial of service via application crash, or possibly
execute arbitrary code with the privileges of the user invoking the
program. (CVE-2010-0739, CVE-2010-1440)

Dan Rosenberg discovered that TeX Live incorrectly handled certain
malformed dvi files. If a user or automated system were tricked into
processing a specially crafted dvi file, an attacker could cause a denial
of service via application crash, or possibly execute arbitrary code with
the privileges of the user invoking the program. (CVE-2010-0827)


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:   232440 57916604c614689a01685a191e88258e
          Size/MD5:     1324 c99680c940f5ce0a8a637f923958b5e0
          Size/MD5: 70262321 8c96d9dee6574a23f35982a60f75a8e9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   157496 3a443c0f131af32761ef10a328aa33b5
          Size/MD5:   114660 d512aa89320da7e075ff88696521d8d5
          Size/MD5:  8602760 e04ed21100816cb8ce4dc3848cfbb38b
          Size/MD5:  2647322 b39c2559fa087fd60a44b44a08230d4e
          Size/MD5:   649320 3eaf463fcfd40368859f012bdae17008
          Size/MD5:   996998 c51066459d553d1eaf1e9007e9d2ccda
          Size/MD5:  6703196 92632c178473fa99243dece1a5d74666
          Size/MD5:  6792992 911838b2a3c6f0b218902f1ff39a50c1
          Size/MD5:   598294 4cff95b67706ac3a232886d501dd2eec
          Size/MD5:  1715496 fac485d66754efb7e748d7f53a790995
          Size/MD5:  2789356 455b37232463313ad5bbf714b074d086
          Size/MD5:  6454074 559ef95a4a1a9ed3f3a9ffcd9a99c94c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   150322 3e37c5adef9280b413ad7b989a61e516
          Size/MD5:   112434 ae90b53a790619fa4fc577fb1ed1ce87
          Size/MD5:  8602774 23891dd633d999e49e44b08f8039d7d0
          Size/MD5:  2383998 eb537ea2278c63a775319374f8087f15
          Size/MD5:   573342 767840105483b1f79ee7bb48557bd3f5
          Size/MD5:   961696 47331bf706c24204db28d401a508c568
          Size/MD5:  6701628 3655d2cae86230bdee8e9aacb6f4d1f5
          Size/MD5:  6793020 98f36babea9b2acdd5844678964ee425
          Size/MD5:   561102 6a114628b024d0c91ac9ed4a87c06e69
          Size/MD5:  1715506 4c128393a8a1727cd643147001ca3940
          Size/MD5:  2669080 c005c81fecfaf5593ae934b2fbf01b7c
          Size/MD5:  6366524 65e43069198910abba054179cc631f30

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   150368 56df65d9c356de18d998943644e7cfca
          Size/MD5:   112256 28ba175b7bd8845f80b419dcad183bc2
          Size/MD5:  8602762 e1a47383a9a26768c3506e375bd0b7b6
          Size/MD5:  2414550 54a4860933c6260481a5e1d0f55a1a2f
          Size/MD5:   578348 c5ba4294373053e647a454887baec414
          Size/MD5:   964394 9b9d8a643ab69f883617555f11eb0efe
          Size/MD5:  6701594 e08701287186bae099e0e8c217b091cb
          Size/MD5:  6792974 5e61f08e1b6aee8705f12a06e5effa2d
          Size/MD5:   565580 1484ed100b6c35cff8440c023f88be79
          Size/MD5:  1715520 1a92d33826216d4ed7dbeeddeff783e2
          Size/MD5:  2682388 3f3a0b899f73c2e62203a17ae6c96d34
          Size/MD5:  6387538 e55ab6b582618a560dc734d16d0ab578

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   159804 0b558b82f36793540fca99839c8feb0f
          Size/MD5:   119658 ef3446c9ece96c8aa44ab93297637a0e
          Size/MD5:  8602764 a1db480b79a602217ea89be5a93bd370
          Size/MD5:  2660712 e8dfdc6959ff7bacb4f845a4a24f6f48
          Size/MD5:   698106 36c371a5ff37a5de7cd427ea877a77c8
          Size/MD5:  1017276 fdb2a9654a990795c8d3c57368fafe77
          Size/MD5:  6704498 4709a0f302f5346a3d6ab5c3fbcc2082
          Size/MD5:  6793068 28ae564353f52010ad92a7338d30ab06
          Size/MD5:   604766 5600c51f97b0771d855e77cc700c8ba8
          Size/MD5:  1715544 42d9701b7ae5b4b1ae321319d007da87
          Size/MD5:  2777364 ce1b6c68fa568cc2f91087fe9f4ed5f5
          Size/MD5:  6574064 b62fe7def1df5581d2f4c4c89dc2990b

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   155430 5f7a48c2c5c736030c3df948f1d0c362
          Size/MD5:   114680 709b660a1e0cbf3ba90a33c6fd4ae9a6
          Size/MD5:  8602826 678335c487ebdcc9f5d7b4ae6eaa6989
          Size/MD5:  2516432 fe8d7e4b51df322ec8b52e8dff6f352a
          Size/MD5:   619554 3a81871a23af2c8853f224a07413bb47
          Size/MD5:   985088 1e6bcd5a9a680c39717f5e9350769d62
          Size/MD5:  6703370 cc8073eb404d5e90f0189479d601faed
          Size/MD5:  6793070 4dd9b3a4103cd52b8b429467f90176d9
          Size/MD5:   580058 94e31f98e5fbede1ee2880d28eea0c6f
          Size/MD5:  1715528 7d97f730d78769c8b217e530020ab723
          Size/MD5:  2739914 3c3bc39c03cb142937920cf9b0a1abff
          Size/MD5:  6466140 e97ad23b5187f27548a90c9b0e579593

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:   359647 ce7d11c058bd0b30d450f4281623f580
          Size/MD5:     1815 3e997ed5b8f14b354bf9846219f0d0a2
          Size/MD5: 70727055 9b62b03b38f157b1ca9bfbd05d6c8bc7

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   165462 c817fb7834cf85cb859931aca146e3cd
          Size/MD5:   122884 223add751ec5b893ab499cc1464a4888
          Size/MD5:  8610450 a05c656c36efb82967f1f9e351de3329
          Size/MD5:  2628888 fea20d04f52deae0eea6fbb08dd9706c
          Size/MD5:   683604 32214e7ecfb3668a82c583a3345dbf3a
          Size/MD5:  1292308 37c669c3635066d40161fdcc74981619
          Size/MD5:  6715016 f07f790ed5c6199252590d00c33001d7
          Size/MD5:  6801110 e76f67e032106485253f72fbfdb27e2d
          Size/MD5:  6420210 ef6acde6a45526a5b06c0d3a1d91f552
          Size/MD5:   639724 34625c6efff225b6846035c315c00173
          Size/MD5:  1723142 8ceff3c7256459df5146e9856bbe4d32
          Size/MD5:  2804494 8c3cc43e5a886821314ee15f320bdc92

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   158696 6cbaee28329477e85d325b4214545422
          Size/MD5:   120528 8ad1ef6ea506d14da2418c5908dace84
          Size/MD5:  8610434 c67cbb7fe9950d2502d9c4869e7e2bec
          Size/MD5:  2358188 48b81b354a9b153aa44994e61c8eeef8
          Size/MD5:   602656 ab0e3e7585904e847905926de77e916e
          Size/MD5:  1257916 bf8b83d35185c652fd408849d00e80dd
          Size/MD5:  6713590 f910e4b330e046046fe617eba15753e0
          Size/MD5:  6801202 bc4bb99b7f092bf225d9c1d580af11ee
          Size/MD5:  6331334 a394cc5265c45034c159c13fd4cfa903
          Size/MD5:   601138 ad3b552fdc809748f6f77fbd0eadf721
          Size/MD5:  1723202 4c99b2415fc6aa4ff813ffd6b065321a
          Size/MD5:  2681266 e3643f3fae0aea8735159920b61409b4

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   158538 3394295db6e6b2e624b1b8094285fc81
          Size/MD5:   120194 98f7d9213ab74efec2d0b0aca2f89217
          Size/MD5:  8610432 2f85c50fe52afd0b08092e3453cf8ad1
          Size/MD5:  2383522 0bf8158dd496feb21060e61a4219c01c
          Size/MD5:   607334 0615e2d622882c0b75177b2d48ae8468
          Size/MD5:  1258184 e8e43208babe597dc2a30f42a0837efa
          Size/MD5:  6713338 624151e54f2d71aebf361512c4e08bb0
          Size/MD5:  6801166 541c05d3830c65911ec941cbe4528fcb
          Size/MD5:  6345048 ee44eca565f27dd958cbcf416471a541
          Size/MD5:   604260 922572ebe9bd103e55f3cf5366a16b9f
          Size/MD5:  1723164 90c80aabe55eebee6a63cad6e18bb5cf
          Size/MD5:  2691874 135d72612887efab28fe228cf353d759

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   167846 c2169ce87edd90661f12b1ec7b15b2ae
          Size/MD5:   127588 af7826c61138a00cb549fd59a22a0b36
          Size/MD5:  8610442 ec732d26794f3cc951c652f9135e8622
          Size/MD5:  2638622 6d217ff5c2a102dc7c67f1ede2fd9ea1
          Size/MD5:   731882 2e9e52f438dca627348af8eb56c24bed
          Size/MD5:  1311134 d565efc064aa1434e4e8504073261f9e
          Size/MD5:  6716338 634cd359de98ff217de9d041c2750360
          Size/MD5:  6801182 cc26651bd2934deec7c414993d9953fe
          Size/MD5:  6516376 6223a1c13952a27f16156e69619985c9
          Size/MD5:   646888 138369532005cdf4fb8dc77092f2675d
          Size/MD5:  1723222 15692ba2f697b346b575318988a3a3eb
          Size/MD5:  2801028 db37ae73b09217bac67aa646e0eddcfc

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   162516 46d6aeeeb7f60c4fa62301ce6014794e
          Size/MD5:   122296 0c31ba4660bf3370a4b22430e2cd02c1
          Size/MD5:  8610424 4581c1e196deaba2ce3eb393962c15d4
          Size/MD5:  2510782 13ce8627e986faae459e46fddeab4d73
          Size/MD5:   655056 598254effdef393fbadc496403c80c74
          Size/MD5:  1282340 d2d6536cab4823046ed2897dd7d87e1c
          Size/MD5:  6715418 25246b96532482e88a2721e7c1d3d092
          Size/MD5:  6801150 9a45197f73432a6d138dbe9d99baac25
          Size/MD5:  6423334 74025318f610fc7bdd2a7846bd8dea4b
          Size/MD5:   623424 a38c5e791237fb744e395f4e2f25c88e
          Size/MD5:  1723168 fee6884712e6a17f49eb9cc420188129
          Size/MD5:  2761884 af3d208b33668f96d3729a1ceb691407

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:   370730 9e066108c7e5cf93566bd2ed967d39e2
          Size/MD5:     1833 d03412d12872c44154681014b4d11149
          Size/MD5: 70727055 9b62b03b38f157b1ca9bfbd05d6c8bc7

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   166956 7beb18240a1289e778e2ec6143bb9646
          Size/MD5:   123954 4f23d93c385f2c7dabb1a17819274c0f
          Size/MD5:  8611244 9ca303b561835bff9b44545e153a4254
          Size/MD5:  2642970 5d920272d4441a8ddc7c94f1fb4ed9cd
          Size/MD5:   688900 22677e66b377c4b7f8bfbccf6c1fd3f4
          Size/MD5:  1294376 c29b1149f7a1bb9bd98e080bd892b3f1
          Size/MD5:  6716782 b3467d6c0ad4b4d7ff3a9f89eabfbea4
          Size/MD5:  6802130 66e264a87fa4938d921ff7b4fae86340
          Size/MD5:   642528 b0acbc78377c0eea74f3be5777d0b8db
          Size/MD5:  1724582 862ca8fdb69668bc1e7ea928935aa8ee
          Size/MD5:  2820784 b9f834a83e123795380922e921b10a2d
          Size/MD5:  6427404 5a202cd0a74c169d28d7b1aa3148c98e

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   159870 18c3b66218a960c3c6b47efab46ac449
          Size/MD5:   121558 5611c6ec2670890a4c687fff5d0650ea
          Size/MD5:  8611212 99d0d42ac5afd0b274889b9044870f30
          Size/MD5:  2367810 9d5c16f1bc7208af4465168dee23fa9f
          Size/MD5:   605434 004837c3975cf7c3ca7243f865d95b28
          Size/MD5:  1259760 29cdfcd16d5edf0615037b9ee542daaa
          Size/MD5:  6715130 15b3dcf4c64b9df8b807094b96db5f99
          Size/MD5:  6802102 16cd6032d7f45e89071bddb4e68f1469
          Size/MD5:   604348 a76b3019dc8b62a6aa4bac64af76b798
          Size/MD5:  1724588 082d700e3dfabfd766b069d940a36c1a
          Size/MD5:  2689608 36a0589de9187ecedb5005da147f27f1
          Size/MD5:  6344260 7a0e09629e9b321efb53d26811130c4a

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   160122 5282f8875c9282ad555082a1601dfe69
          Size/MD5:   121490 7d134d12cd865f3d7fca3d9c3a1f177a
          Size/MD5:  8611222 e091d389a556cca704344bb20968421c
          Size/MD5:  2396624 6a5fd16ae2cbf32be0d486747fb98840
          Size/MD5:   613542 76562d6d7e532d389230be20631220fd
          Size/MD5:  1261552 ff48bf063ceac134c105bbd8ce71ca57
          Size/MD5:  6715096 a671997d9a583eea45932eec174a5626
          Size/MD5:  6802070 3b6e991e99c7adff752c51ec38018818
          Size/MD5:   607050 d374ff9bc32b7031044b219fa1a30f37
          Size/MD5:  1724564 9cbc738ee795248deda534aa214465df
          Size/MD5:  2700382 8443f051013aae76e719578593e71269
          Size/MD5:  6364862 d0cd9ce5f585567d24730091ef6d565c

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   168978 85932e4da91439d9dacfa15b1ff5682e
          Size/MD5:   126782 03f317aa0dbdd25b9b0bb451056d40b6
          Size/MD5:  8611240 f5ad329721ccc8e562a7765a3fd09801
          Size/MD5:  2629582 1b2fa0a47fe6d9b3c0a6aff57bac390a
          Size/MD5:   690706 a8d7dc6cd84f1e0f658f5bc5767ff310
          Size/MD5:  1298892 8be54cb778f442972df790197e154a9a
          Size/MD5:  6717706 2dff2dd873dddfec3cf1061b52e46462
          Size/MD5:  6802168 ebea7d5953bea8b58d0923f298e111aa
          Size/MD5:   642434 2aadc64b89f37a05565c5b223219e4ea
          Size/MD5:  1724614 7d35dd8508af5fe54a3513b959a4274e
          Size/MD5:  2811298 6cfb8b827a1652833aab098b25947599
          Size/MD5:  6539956 d0ed00a6db36c6489fcd2937b0a3f452

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   164164 67aee948a311c661ee74089a3427199c
          Size/MD5:   123424 0130484dd9f760ea8c2395824c472c59
          Size/MD5:  8611262 0c0658b8cc2817837323a9feb0e36955
          Size/MD5:  2538114 ffb48cf196cfd29d53e855cf27432d3c
          Size/MD5:   661460 98dc295912e1cf3638a21ad909f7d5e1
          Size/MD5:  1286810 42e759df9d13a617bebd35087525aeef
          Size/MD5:  6717180 42303b589783218058fa4c0f59692ca0
          Size/MD5:  6802166 2dabc0967441fa71986f600327080d6e
          Size/MD5:   626820 92491a7eb12538f07c6afb27226b5c2e
          Size/MD5:  1724548 b570f989ae99b4b9d380c1078628b5fe
          Size/MD5:  2796746 d723644351e8bc28efb8cd6aad4ab4ff
          Size/MD5:  6450038 2268c573218e176cb6fc7e7ca85f01a2

Updated packages for Ubuntu 10.04:

  Source archives:

          Size/MD5:    57878 49fe58e3077e23c178b5582cbbef48b4
          Size/MD5:     1504 15db436e0f5230b811304c9271766a72
          Size/MD5: 51837345 71e96632cff062dd8d9e4aa4973c2d8e

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   176952 398d7696f52e07f9cf30f434e90d1542
          Size/MD5:   133308 d6a7b2bf463f52efc6534a11f9d76613
          Size/MD5:  8072588 91f8a29153b18eded17d91011557901a

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   169134 e830e2a965117ca001588630bcc58a2d
          Size/MD5:   129520 4c61c76d596df4cb659aa80cbc2520fb
          Size/MD5:  7438860 9f7e5f31da6d7fec3d60ebe363c797e0

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   178184 d6f96d0aeff12315b26a795ce5a7b780
          Size/MD5:   134874 b272fee16f29d5313a8e72826b67db0c
          Size/MD5:  8317828 6e8d0e13b31c3527ba7c3f592fe9074d

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   173162 1b9f36e89af28691f4cded591d98185d
          Size/MD5:   131604 52775233b790ce1648770202f6ca6a8a
          Size/MD5:  8162802 c1c70e46ce659cbcd4150b299eee618f