mimetex (1.50-1ubuntu1) karmic; urgency=low
* SECURITY UPDATE: arbitrary code execution via long picture, circle and
input tags
- mimetex.c: replace strcpy with strninit macro that uses strncpy,
adjust some buffer sizes.
- CVE-2009-1382
* SECURITY UPDATE: information disclosure via input and counter tags
- mimetex.c: disable input and counter tags.
- CVE-2009-2459
Date: Wed, 07 Oct 2009 08:20:58 -0400
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Core Developers <[email protected]>
Signed-By: Kees Cook <[email protected]>
https://launchpad.net/ubuntu/karmic/+source/mimetex/1.50-1ubuntu1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 07 Oct 2009 08:20:58 -0400
Source: mimetex
Binary: mimetex
Architecture: source
Version: 1.50-1ubuntu1
Distribution: karmic
Urgency: low
Maintainer: Ubuntu Core Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
mimetex - LaTeX math expressions to anti-aliased GIF images converter
Changes:
mimetex (1.50-1ubuntu1) karmic; urgency=low
.
* SECURITY UPDATE: arbitrary code execution via long picture, circle and
input tags
- mimetex.c: replace strcpy with strninit macro that uses strncpy,
adjust some buffer sizes.
- CVE-2009-1382
* SECURITY UPDATE: information disclosure via input and counter tags
- mimetex.c: disable input and counter tags.
- CVE-2009-2459
Checksums-Sha1:
a08dc7beca1de86f9b0b168b6ddb607d4a1cd446 1093 mimetex_1.50-1ubuntu1.dsc
6ef165d8a6cfcd29b00e85c548bc5088a7bd1c5c 5506 mimetex_1.50-1ubuntu1.diff.gz
Checksums-Sha256:
cf1afc357dddd329c43e4363f8a5ecb849d08c3a42f93e401594121045fe25c6 1093
mimetex_1.50-1ubuntu1.dsc
a942ca14738d9d1c0210d080fd0827cab714438702cc345315206840051341e0 5506
mimetex_1.50-1ubuntu1.diff.gz
Files:
a68185d885dda8d4c97770fdaa710539 1093 utils optional mimetex_1.50-1ubuntu1.dsc
8347fc10919ae9cae5aaa0fe12c8a6be 5506 utils optional
mimetex_1.50-1ubuntu1.diff.gz
Original-Maintainer: Isaac Clerencia <[email protected]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Kees Cook <[email protected]>
iEYEARECAAYFAkrMzxsACgkQH/9LqRcGPm093gCfTYoumr/CfzjOKdzU8gXBJXZe
AwkAoI3oRe16lYfUutVG9Ju1ZWbvAmwx
=xv+n
-----END PGP SIGNATURE-----
--
Karmic-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/karmic-changes