Synopsis: Important: tetex security update Issue date: 2007-08-01 CVE Names: CVE-2007-3387 Maurycy Prodeus discovered an integer overflow flaw in the processing of PDF files. An attacker could create a malicious PDF file that would cause TeTeX to crash or potentially execute arbitrary code when opened. (CVE-2007-3387) SL 3.0.x SRPMS: tetex-1.0.7-67.10.src.rpm i386: tetex-1.0.7-67.10.i386.rpm tetex-afm-1.0.7-67.10.i386.rpm tetex-doc-1.0.7-67.10.i386.rpm tetex-dvips-1.0.7-67.10.i386.rpm tetex-fonts-1.0.7-67.10.i386.rpm tetex-latex-1.0.7-67.10.i386.rpm tetex-xdvi-1.0.7-67.10.i386.rpm x86_64: tetex-1.0.7-67.10.x86_64.rpm tetex-afm-1.0.7-67.10.x86_64.rpm tetex-doc-1.0.7-67.10.x86_64.rpm tetex-dvips-1.0.7-67.10.x86_64.rpm tetex-fonts-1.0.7-67.10.x86_64.rpm tetex-latex-1.0.7-67.10.x86_64.rpm tetex-xdvi-1.0.7-67.10.x86_64.rpm SL 4.x SRPMS: tetex-2.0.2-22.0.1.EL4.8.src.rpm i386: tetex-2.0.2-22.0.1.EL4.8.i386.rpm tetex-afm-2.0.2-22.0.1.EL4.8.i386.rpm tetex-doc-2.0.2-22.0.1.EL4.8.i386.rpm tetex-dvips-2.0.2-22.0.1.EL4.8.i386.rpm tetex-fonts-2.0.2-22.0.1.EL4.8.i386.rpm tetex-latex-2.0.2-22.0.1.EL4.8.i386.rpm tetex-xdvi-2.0.2-22.0.1.EL4.8.i386.rpm x86_64: tetex-2.0.2-22.0.1.EL4.8.x86_64.rpm tetex-afm-2.0.2-22.0.1.EL4.8.x86_64.rpm tetex-doc-2.0.2-22.0.1.EL4.8.x86_64.rpm tetex-dvips-2.0.2-22.0.1.EL4.8.x86_64.rpm tetex-fonts-2.0.2-22.0.1.EL4.8.x86_64.rpm tetex-latex-2.0.2-22.0.1.EL4.8.x86_64.rpm tetex-xdvi-2.0.2-22.0.1.EL4.8.x86_64.rpm SL 5.x SRPMS: tetex-3.0-33.1.el5.src.rpm i386: tetex-3.0-33.1.el5.i386.rpm tetex-afm-3.0-33.1.el5.i386.rpm tetex-doc-3.0-33.1.el5.i386.rpm tetex-dvips-3.0-33.1.el5.i386.rpm tetex-fonts-3.0-33.1.el5.i386.rpm tetex-latex-3.0-33.1.el5.i386.rpm tetex-xdvi-3.0-33.1.el5.i386.rpm x86_64: tetex-3.0-33.1.el5.x86_64.rpm tetex-afm-3.0-33.1.el5.x86_64.rpm tetex-doc-3.0-33.1.el5.x86_64.rpm tetex-dvips-3.0-33.1.el5.x86_64.rpm tetex-fonts-3.0-33.1.el5.x86_64.rpm tetex-latex-3.0-33.1.el5.x86_64.rpm tetex-xdvi-3.0-33.1.el5.x86_64.rpm -Connie Sieh -Troy Dawson