| Revision Date: | 2006-11-08 | Version: | 639 |
| Title: | RHSA-2006:0727: texinfo security update (Moderate) |
| Description: | Texinfo is a documentation system that can produce both online information and printed output from a single source file.
A buffer overflow flaw was found in Texinfo's texindex command. An attacker could construct a carefully crafted Texinfo file that could cause texindex to crash or possibly execute arbitrary code when opened. (CVE-2006-4810)
A flaw was found in the way Texinfo's texindex command creates temporary files. A local user could leverage this flaw to overwrite files the user executing texindex has write access to. (CVE-2005-3011)
Users of Texinfo should upgrade to these updated packages which contain backported patches and are not vulnerable to these issues.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | CVE-2005-3011
CVE-2006-4810
RHSA-2006:0727
RHSA-2006:0727-01
RHSA-2006:0727-01
|
| Platform(s): | Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
| Product(s): | |
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed OR Package Information
Red Hat Enterprise Linux 3 is installed
AND
texinfo is earlier than 0:4.5-3.el3.1
AND texinfo is signed with Red Hat master key
info is earlier than 0:4.5-3.el3.1
AND info is signed with Red Hat master key
OR Package Information
Red Hat Enterprise Linux 4 is installed
AND
texinfo is earlier than 0:4.7-5.el4.2
AND texinfo is signed with Red Hat master key
info is earlier than 0:4.7-5.el4.2
AND info is signed with Red Hat master key
|
| Definition Synopsis |
| Release Information
Red Hat Enterprise Linux 3 is installed
AND
info is earlier than 0:4.5-3.el3.1
AND info is signed with Red Hat master key
texinfo is earlier than 0:4.5-3.el3.1
AND texinfo is signed with Red Hat master key
OR Package Information
Red Hat Enterprise Linux 4 is installed
AND
info is earlier than 0:4.7-5.el4.2
AND info is signed with Red Hat master key
texinfo is earlier than 0:4.7-5.el4.2
AND texinfo is signed with Red Hat master key
|
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed
OR Package Information
Red Hat Enterprise Linux 4 is installed
AND
info is earlier than 0:4.7-5.el4.2
AND info is signed with Red Hat redhatrelease2 key
texinfo is earlier than 0:4.7-5.el4.2
AND texinfo is signed with Red Hat redhatrelease2 key
|