Mandrake alert: tetex update

Posted by dave on Oct 23, 2002 7:43 AM EDT
Mailing list
Mail this story
Print this story

A vulnerability was discovered in dvips by Olaf Kirch that would allow remote users with access to the printer to execute commands as the lp user through sending special print jobs to the printer.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

Mandrake Linux Security Update Advisory ________________________________________________________________________

Package name: tetex Advisory ID: MDKSA-2002:070 Date: October 23rd, 2002 Affected versions: 7.2, 8.0, 8.1, 8.2, 9.0 ________________________________________________________________________

Problem Description:

A vulnerability was discovered in dvips by Olaf Kirch that would allow remote users with access to the printer to execute commands as the lp user through sending special print jobs to the printer. ________________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0836 ________________________________________________________________________

Updated Packages:

Linux-Mandrake 7.2: 9536c0847833033cd9c17445e039070b 7.2/RPMS/tetex-1.0.7-11.2mdk.i586.rpm 03e84941b5651001afab06d84fcd17ce 7.2/RPMS/tetex-afm-1.0.7-11.2mdk.i586.rpm e11683234ae886a6f2ccaf3f30734488 7.2/RPMS/tetex-doc-1.0.7-11.2mdk.i586.rpm f3ac59f8c4409f6c20006952e2005e91 7.2/RPMS/tetex-dvilj-1.0.7-11.2mdk.i586.rpm c35860b2c60808d661b3685304b257b2 7.2/RPMS/tetex-dvips-1.0.7-11.2mdk.i586.rpm 61134c58eedfee9cea69c8a6b7862761 7.2/RPMS/tetex-latex-1.0.7-11.2mdk.i586.rpm 9e6d970885e7366168b43393dc837a5c 7.2/RPMS/tetex-xdvi-1.0.7-11.2mdk.i586.rpm e52abdec3cdfa427e43b12b2ee932861 7.2/SRPMS/tetex-1.0.7-11.2mdk.src.rpm

Mandrake Linux 8.0: fdef134831bb0b0dabe62caf5f3fa5be 8.0/RPMS/tetex-1.0.7-21.2mdk.i586.rpm 33aa00b0498fb3015b8ad1cdfa0bc38d 8.0/RPMS/tetex-afm-1.0.7-21.2mdk.i586.rpm b3a4ed342a28eff3b84f70d03af371c4 8.0/RPMS/tetex-doc-1.0.7-21.2mdk.i586.rpm f735f137ef3255acc3403fde206ea5ff 8.0/RPMS/tetex-dvilj-1.0.7-21.2mdk.i586.rpm 269656c70c65b87932b19ac4ec6fdd68 8.0/RPMS/tetex-dvipdfm-1.0.7-21.2mdk.i586.rpm d9a0f061284171eb9530efd4e52b1e97 8.0/RPMS/tetex-dvips-1.0.7-21.2mdk.i586.rpm 15e78b1600f0357ded2e9298008d1486 8.0/RPMS/tetex-latex-1.0.7-21.2mdk.i586.rpm 86674b2cb2399bf50f9114c0329fd763 8.0/RPMS/tetex-xdvi-1.0.7-21.2mdk.i586.rpm f9991f1e8db1dbcc93784f4132af9c99 8.0/SRPMS/tetex-1.0.7-21.2mdk.src.rpm

Mandrake Linux 8.0/ppc: d39bff3a1db44e3885da34edac657ebb ppc/8.0/RPMS/tetex-1.0.7-21.2mdk.ppc.rpm 29a44c59e2ee224d5ba2308f57da2565 ppc/8.0/RPMS/tetex-afm-1.0.7-21.2mdk.ppc.rpm c9bcab4ae8c1cf363378bc201d1a41e9 ppc/8.0/RPMS/tetex-doc-1.0.7-21.2mdk.ppc.rpm 22bae5bb059092d017c2a3dfffc7e307 ppc/8.0/RPMS/tetex-dvilj-1.0.7-21.2mdk.ppc.rpm 4ddb080cd227e16c4137cbd730a5c48b ppc/8.0/RPMS/tetex-dvipdfm-1.0.7-21.2mdk.ppc.rpm cdff61c5400000f5603564f27110dec7 ppc/8.0/RPMS/tetex-dvips-1.0.7-21.2mdk.ppc.rpm 154f095210d2fc0be8bf481492137127 ppc/8.0/RPMS/tetex-latex-1.0.7-21.2mdk.ppc.rpm 4c7cbf624784b750a42f2401b134d273 ppc/8.0/RPMS/tetex-xdvi-1.0.7-21.2mdk.ppc.rpm f9991f1e8db1dbcc93784f4132af9c99 ppc/8.0/SRPMS/tetex-1.0.7-21.2mdk.src.rpm

Mandrake Linux 8.1: b606de7171113842fc85f926e38a369f 8.1/RPMS/tetex-1.0.7-31.2mdk.i586.rpm e7b9e1968490684551f3c960dd1b7af6 8.1/RPMS/tetex-afm-1.0.7-31.2mdk.i586.rpm ef6906596e228f592b53111fb97f2a1b 8.1/RPMS/tetex-doc-1.0.7-31.2mdk.i586.rpm b93b32179eecabd47c1c7bb0df144f36 8.1/RPMS/tetex-dvilj-1.0.7-31.2mdk.i586.rpm 7ffaef87f827fb94b209620511975da0 8.1/RPMS/tetex-dvipdfm-1.0.7-31.2mdk.i586.rpm 39b009f7d907ad3efca338336dc49b41 8.1/RPMS/tetex-dvips-1.0.7-31.2mdk.i586.rpm 9507b7fdf65e886b581b480c41dc71df 8.1/RPMS/tetex-latex-1.0.7-31.2mdk.i586.rpm d26b333a8e6a71d55380605b0ec2ce49 8.1/RPMS/tetex-xdvi-1.0.7-31.2mdk.i586.rpm bc27baeb8ad39daf985121a6514b5b1f 8.1/SRPMS/tetex-1.0.7-31.2mdk.src.rpm

Mandrake Linux 8.1/ia64: bae1b3a3bd48c3c7dd72adb6e5566515 ia64/8.1/RPMS/tetex-1.0.7-31.2mdk.ia64.rpm 668071f0c7ca93022f1ac85c97c752a4 ia64/8.1/RPMS/tetex-afm-1.0.7-31.2mdk.ia64.rpm 904ae2bab107f4070c127ccaddd6b19e ia64/8.1/RPMS/tetex-doc-1.0.7-31.2mdk.ia64.rpm e1596f9fbc18fae38b673d1993158fd5 ia64/8.1/RPMS/tetex-dvilj-1.0.7-31.2mdk.ia64.rpm bded3a7378e50830faaa836e6d3fb34d ia64/8.1/RPMS/tetex-dvipdfm-1.0.7-31.2mdk.ia64.rpm bb35d51fbd3d936e3ab23f00b9893ee6 ia64/8.1/RPMS/tetex-dvips-1.0.7-31.2mdk.ia64.rpm 367a7308bd66b3cc0ff666c2b8b1f616 ia64/8.1/RPMS/tetex-latex-1.0.7-31.2mdk.ia64.rpm 1dc1613325ff06f0a0e0cc1c640de2d6 ia64/8.1/RPMS/tetex-xdvi-1.0.7-31.2mdk.ia64.rpm bc27baeb8ad39daf985121a6514b5b1f ia64/8.1/SRPMS/tetex-1.0.7-31.2mdk.src.rpm

Mandrake Linux 8.2: 8035a41458ce40ae353faa076fd1d969 8.2/RPMS/tetex-1.0.7-44.1mdk.i586.rpm 98a35287585e2f140713e50117627f5f 8.2/RPMS/tetex-afm-1.0.7-44.1mdk.i586.rpm c1903112422278e0890f83e0d38ee9d2 8.2/RPMS/tetex-doc-1.0.7-44.1mdk.i586.rpm f5b6bf78efb17e7618ce12a9e9d843e5 8.2/RPMS/tetex-dvilj-1.0.7-44.1mdk.i586.rpm 5c57b333858da40fca3e115df52619b6 8.2/RPMS/tetex-dvipdfm-1.0.7-44.1mdk.i586.rpm a7d41ce2354df5e2320480678d824b90 8.2/RPMS/tetex-dvips-1.0.7-44.1mdk.i586.rpm 01ce1466bedda6e04c67062a1f283eb2 8.2/RPMS/tetex-latex-1.0.7-44.1mdk.i586.rpm 04578188d2c9c53028654cfb7c53c9fd 8.2/RPMS/tetex-xdvi-1.0.7-44.1mdk.i586.rpm 0b0e8c8cdffc56c6587e591e9b2ab7b9 8.2/SRPMS/tetex-1.0.7-44.1mdk.src.rpm

Mandrake Linux 8.2/ppc: 06c4455ab3cb00e9d468bc8547515ad0 ppc/8.2/RPMS/tetex-1.0.7-44.1mdk.ppc.rpm fbdbc6835108d12e54ad5a23600380c2 ppc/8.2/RPMS/tetex-afm-1.0.7-44.1mdk.ppc.rpm 22d30fdfce172cb1eb5127625f00555f ppc/8.2/RPMS/tetex-doc-1.0.7-44.1mdk.ppc.rpm a36a812aeebc1e0a42058d0383e55fba ppc/8.2/RPMS/tetex-dvilj-1.0.7-44.1mdk.ppc.rpm 9c4e82b7f657ec3f97abbc2b55e20d28 ppc/8.2/RPMS/tetex-dvipdfm-1.0.7-44.1mdk.ppc.rpm d58c6c80d238ec4455257bd9749982cb ppc/8.2/RPMS/tetex-dvips-1.0.7-44.1mdk.ppc.rpm 8c8cd113923ae60b16651d6121ee5f1d ppc/8.2/RPMS/tetex-latex-1.0.7-44.1mdk.ppc.rpm 6eb636192ec72f40b881c28d1fbd45b9 ppc/8.2/RPMS/tetex-xdvi-1.0.7-44.1mdk.ppc.rpm 0b0e8c8cdffc56c6587e591e9b2ab7b9 ppc/8.2/SRPMS/tetex-1.0.7-44.1mdk.src.rpm

Mandrake Linux 9.0: e31e9f1e592289e2de76c417ed1173c9 9.0/RPMS/tetex-1.0.7-61mdk.i586.rpm 6677afced4519356a2621153d54a075e 9.0/RPMS/tetex-afm-1.0.7-61mdk.i586.rpm 24bbee51794fb0d2270649e4d4f5762e 9.0/RPMS/tetex-doc-1.0.7-61mdk.i586.rpm 7d949528d0c31f8966678f3bed039122 9.0/RPMS/tetex-dvilj-1.0.7-61mdk.i586.rpm ef2852e24ef4e44be415e4ff0c0d450f 9.0/RPMS/tetex-dvipdfm-1.0.7-61mdk.i586.rpm 94ec8b8ee9ba2cd22510da90d867e21d 9.0/RPMS/tetex-dvips-1.0.7-61mdk.i586.rpm c31e5f316898b37ae2e9e1502af10ab2 9.0/RPMS/tetex-latex-1.0.7-61mdk.i586.rpm 4e973b5b5a6e02a78aac2dd1556c646b 9.0/RPMS/tetex-xdvi-1.0.7-61mdk.i586.rpm 57ed84bcabc5a055ea6cd28325f2a74e 9.0/SRPMS/tetex-1.0.7-61mdk.src.rpm ________________________________________________________________________

Bug IDs fixed (see https://qa.mandrakesoft.com for more information):

________________________________________________________________________

To upgrade automatically, use MandrakeUpdate. The verification of md5 checksums and GPG signatures is performed automatically for you.

If you want to upgrade manually, download the updated package from one of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm". A list of FTP mirrors can be obtained from:

http://www.mandrakesecure.net/en/ftp.php

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command:

rpm --checksig <filename>

All packages are signed by MandrakeSoft for security. You can obtain the GPG public key of the Mandrake Linux Security Team from:

https://www.mandrakesecure.net/RPM-GPG-KEYS

Please be aware that sometimes it takes the mirrors a few hours to update.

You can view other update advisories for Mandrake Linux at:

http://www.mandrakesecure.net/en/advisories/

MandrakeSoft has several security-related mailing list services that anyone can subscribe to. Information on these lists can be obtained by visiting:

http://www.mandrakesecure.net/en/mlist.php

If you want to report vulnerabilities, please contact

security@linux-mandrake.com ________________________________________________________________________

Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security@linux-mandrake.com>

- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.7 (GNU/Linux)

mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7 WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg 2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy /NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulqIRgQQEQIA BgUCOtNVGQAKCRBZ5w3um0pAJJWQAKDUoL5He+mKbfrMaTuyU5lmRyJ0fwCgoFAP WdvQlu/kFjphF740XeOwtOqIRgQQEQIABgUCOu8A6QAKCRBynDnb9lq3CnpjAJ4w Pk0SEE9U4r40IxWpwLU+wrWVugCdFfSPllPpZRCiaC7HwbFcfExRmPaIRgQQEQIA BgUCPI+UAwAKCRDniYrgcHcf8xK5AKCm/Mq8qP8GE0o1hEX22QsJMZwH5gCfZ72H 8TacOb3oAmBdprf+K6gkdOiIRgQQEQIABgUCOtOieAAKCRCv2bZyU0yB80MeAJ9K +jXt0cKuaUonRU+CRGetk6t9dgCfTRRL6/puOKdD6md70+K5EBBSvsG0OE1hbmRy YWtlIExpbnV4IFNlY3VyaXR5IFRlYW0gPHNlY3VyaXR5QG1hbmRyYWtlc29mdC5j b20+iFcEExECABcFAjyPnuUFCwcKAwQDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmFi+ AJsHhohgnU3ik4+gy3EdFlB2i/MBoACg6lHn5cnVvTcmgNccWxeNxLLZI5e5AQ0E OWnn7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ 9F779FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzR xBXVJb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z 269s+A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN 6SCXVl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZ jTcl3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo 0NAiRYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJ EJGXlA== =yGlX - -----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9tsJ3mqjQ0CJFipgRAqBkAJ99k0tQ6Qwa/UpLd6EYDACqmUG2PQCfRm5v 7oPSUZBBnSKN8hcRNlSugD0= =ATxa -----END PGP SIGNATURE-----

  Nav
» Read more about: Story Type: Security; Groups: Mandriva

« Return to the newswire homepage

This topic does not have any threads posted yet!

You cannot post until you login.