Skip to content
OpenAdvisories
Unscored RHSA-2010:0400 17 CVEs

Red Hat Security Advisory: tetex security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client tetex 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-afm 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-debuginfo 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-doc 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-dvips 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-fonts 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-latex 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::client tetex-xdvi 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-afm 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-debuginfo 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-doc 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-dvips 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-fonts 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-latex 0:3.0-33.8.el5_5.5
Red Hat · RHEL 5 enterprise_linux:5::server tetex-xdvi 0:3.0-33.8.el5_5.5

Vulnerabilities 17

  • Unscored —

    Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products …

  • Unscored —

    Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products…

  • Unscored —

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to ca…

  • Unscored —

    Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attacker…

  • Unscored —

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

  • Unscored —

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

  • Unscored —

    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler bef…

  • Unscored —

    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and o…

  • Unscored —

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

  • Unscored —

    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows…

  • Unscored —

    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before …

  • Unscored —

    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products al…

  • Unscored —
    CVE-2009-3608 EPSS 10%

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.…

  • Unscored —

    Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…

  • Unscored —

    Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-as…

  • Unscored —

    Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of se…

  • Unscored —

    Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attacke…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495886
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=495899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=572941
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=573999
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=586819
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0400.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0146
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0146
  • report
    https://access.redhat.com/security/cve/CVE-2009-0147
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0147
  • report
    https://access.redhat.com/security/cve/CVE-2009-0166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0166
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0166
  • report
    https://access.redhat.com/security/cve/CVE-2009-0195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0195
  • report
    https://access.redhat.com/security/cve/CVE-2009-0791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0791
  • report
    https://access.redhat.com/security/cve/CVE-2009-0799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0799
  • report
    https://access.redhat.com/security/cve/CVE-2009-0800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0800