New teTeX packages available

Updated teTeX packages are available, fixing a temporary file handling
vulnerability and an insecure invocation of dvips in a print filter.

A flaw has been discovered in the temporary file handling of some of
the scripts from the teTeX set of packages. This can, under some
circumstances, lead to a compromise of the groups that LPRng runs as.
Several scripts used the current process ID as
temporary file names and have now been altered to use the 'mktemp'
program instead.

Additionally, an insecure invocation of the 'dvips' program has been
discovered in the print filter used for handling DVI files. This has
been corrected to use the -R option.

The temporary file handling flaw affects Red Hat Linux 7.1 and
earlier. The DVI print filter problem affects Red Hat Linux 7.0 and
earlier. This vulnerability was discovered by zen-parse.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains
the desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find RHN to be an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will ultimately upgrade the
appropriate RPMs on your system.

43342 - race condition - possible elevation of privs

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0906
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1002

dvips, files, temporary, tetex