Red Hat Security AdvisoryRHSA-2006:0727
texinfo security update
Released 2006-11-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 info-4.5-3.el3.1, info-4.5-3.el3.1.i386, texinfo-4.5-3.el3.1 +1
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 info-4.0b-3.el2.1.i386, info-4.0b-3.el2.1.ia64, texinfo-4.0b-3.el2.1 +2
- Red Hat Enterprise Linux AS version 3 info-4.5-3.el3.1, info-4.5-3.el3.1.i386, info-4.5-3.el3.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 info-4.7-5.el4.2, info-4.7-5.el4.2.i386, info-4.7-5.el4.2.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 info-4.7-5.el4.2, info-4.7-5.el4.2.i386, texinfo-4.7-5.el4.2 +1
- Red Hat Enterprise Linux ES version 2.1 info-4.0b-3.el2.1.i386, texinfo-4.0b-3.el2.1, texinfo-4.0b-3.el2.1.i386
- Red Hat Enterprise Linux ES version 3 info-4.5-3.el3.1, info-4.5-3.el3.1.i386, info-4.5-3.el3.1.ia64 +3
- Red Hat Enterprise Linux ES version 4 info-4.7-5.el4.2, info-4.7-5.el4.2.i386, info-4.7-5.el4.2.ia64 +3
- Red Hat Enterprise Linux WS version 2.1 info-4.0b-3.el2.1.i386, texinfo-4.0b-3.el2.1, texinfo-4.0b-3.el2.1.i386
- Red Hat Enterprise Linux WS version 3 info-4.5-3.el3.1, info-4.5-3.el3.1.i386, info-4.5-3.el3.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 info-4.7-5.el4.2, info-4.7-5.el4.2.i386, info-4.7-5.el4.2.ia64 +3
- Red Hat Linux Advanced Workstation 2.1 info-4.0b-3.el2.1.ia64, texinfo-4.0b-3.el2.1, texinfo-4.0b-3.el2.1.ia64
Fixes 2 records
Priority LOW 22
Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00556 · Published 2006-11-08 · Fixed
Priority LOW 8
The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00505 · Published 2005-09-21 · Fixed CWE-59
