SUSE-SU-2026:3628-1 Security update for texlive

This update for texlive fixes the following issues: - CVE-2023-46048: NULL pointer dereference in texk/web2c/pdftexdir/writet1.c bsc1222126. - CVE-2023-46051: NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c bsc1222127. - CVE-2026-63729: use-after-free in synctexparser.c in TeX Live...

SUSE-SU-2026:3512-1 Security update for evince

This update for evince fixes the following issue: - CVE-2026-63729: texlive: heap use-after-free in synctexparser.c via a malformed .synctex or .synctex.gz file bsc1272433...

OESA-2026-3192 texlive-base security update

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

SUSE CVE-2026-63729

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...

UBUNTU-CVE-2026-63729

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...