lp:ubuntu/feisty-security/tetex-bin

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

19. By Jamie Strandboge on 2007-12-04

* SECURITY UPDATE: improper bounds on static buffer results in stack-based
  buffer overflow
* debian/patches/SECURITY_CVE-2007-5935.patch: make sure tmpbuf is allocated
  enough memory in texk/dvipsk/hps.c
* SECURITY UPDATE: temporary file race condition in dviljk due to use of
  tmpnam()
* SECURITY UPDATE: various buffer overflows in dviljk due to not checking
  memory boundaries
* debian/patches/SECURITY_CVE-2007-5936+5937.patch: use mkdtemp() if
  available in dvi2xx.c. Replace calls to strcpy() and do proper bounds
  checking in dvi2xx.*.
* Modify Maintainer value to match the DebianMaintainerField
  specification.
* debian/control: Build-Depends on libcairo2-dev
* References
  CVE-2007-5935
  CVE-2007-5936
  CVE-2007-5937

18. By Martin Pitt on 2006-12-19

* Merge to Debian unstable. Remaining Ubuntu changes:
  - debian/patches/patch-poppler: Ported to poppler 0.5.1 API.
  - debian/patches/patch-dvipdfm-timezones: Fix dvipdfm crash in certain
    time zones.

17. By Martin Pitt on 2006-12-15

* Add debian/patches/patch-dvipdfm-timezones:
  - Fix dvipdfm crash in certain time zones.
  - Thanks to Alex Murray for digging out the patch!
  - Closes: LP#66474

16. By Martin Pitt on 2006-11-28

* Merge to Debian unstable. Remaining Ubuntu changes:
  - debian/patches/patch-poppler: Ported to poppler 0.5.1 API.

15. By Martin Pitt on 2006-11-03

* Merge to Debian unstable. Remaining Ubuntu changes:
  - debian/patches/patch-poppler: Ported to poppler 0.5.1 API.

14. By Martin Pitt on 2006-10-12

No-change upload to build against current Poppler. This resolves the
'undefined symbol: _ZN4Dict3addERK10UGooStringP6Object' pdfetex failure
(which breaks texinfo, which in turn causes various FTBFSes).

13. By Martin Pitt on 2006-06-30

* Synchronize to Debian, Ubuntu changes left:
  - debian/patches/patch-poppler: Ported to poppler 0.5.1 API.
  - debian/postinst.functions: Fix regular expression.

12. By Martin Pitt on 2006-05-29

No-change upload to build against the current poppler library (which
changed API a bit due to the last bug fix). Closes: LP#42075

11. By Martin Pitt on 2006-04-10

debian/postinst.in: Do not install oxdvi.bin alternative, since oxdvi.real
does not exist any more. Closes: LP#38321.

10. By Martin Pitt on 2006-04-06

* debian/postinst.functions: Enclose regular epxression in m!! instead of //
  to cope with the contained slashes. Thanks to Chris Moore!
  Closes: LP#33449
* debian/rules.in: Clean up build cruft in clean rule.