OPENSUSE-SU-2024:11441-1 texlive-eskd-2021.186.svn15878-45.2 on GA media

These are all security issues fixed in the texlive-eskd-2021.186.svn15878-45.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11446-1 texlive-latex-web-companion-2021.187.svn29349-47.2 on GA media

These are all security issues fixed in the texlive-latex-web-companion-2021.187.svn29349-47.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11437-1 texlive-chapterfolder-2021.186.2.0.1svn15878-46.2 on GA media

These are all security issues fixed in the texlive-chapterfolder-2021.186.2.0.1svn15878-46.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11452-1 texlive-pst-pdf-2021.186.1.2fsvn56622-46.3 on GA media

These are all security issues fixed in the texlive-pst-pdf-2021.186.1.2fsvn56622-46.3 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : texlive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - texlive: Buffer overflow in t1checkunusualcharstring function in writet1.c CVE-2018-17407 Note that Nessus has not...

RHEL 7 : texlive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - texlive: mpost allows to run non-whitelisted external programs CVE-2016-10243 - mktexlsr revision 22855...

RHEL 7 : texlive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - texlive: mpost allows to run non-whitelisted external programs CVE-2016-10243 Note that Nessus has not tested for...

RHEL 6 : texlive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - texlive: Buffer overflow in t1checkunusualcharstring function in writet1.c CVE-2018-17407 Note that Nessus has not...

SUSE: Security Advisory (SUSE-SU-2024:1296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:1310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1310-1 Security update for texlive

This update for texlive fixes the following issues: - CVE-2023-46048: Fixed NULL pointer dereference in texk/web2c/pdftexdir/writet1.c bsc1222126 - CVE-2023-46051: Fixed NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c bsc1222127...

SUSE SLES12: libkpathsea6 / libptexenc1 / texlive / texlive-bibtex-bin / etc (SUSE-SU-2024:1296-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1296-1 advisory. - CVE-2023-46048: Fixed null pointer dereference in texk/web2c/pdftexdir/writet1.c bsc1222126 Tenable has extracted the preceding descriptio...

SUSE-SU-2024:1296-1 Security update for texlive

This update for texlive fixes the following issues: - CVE-2023-46048: Fixed null pointer dereference in texk/web2c/pdftexdir/writet1.c bsc1222126...

SUSE SLES12 Security Update : texlive-specs-k (SUSE-SU-2024:1203-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1203-1 advisory. CVE-2016-10243: Fixed arbitrary code execution via mpost during TeX document compilation bsc1028271 Tenable has extracted the preceding...

SUSE-SU-2024:1203-1 Security update for texlive-specs-k

This update for texlive-specs-k fixes the following issues: CVE-2016-10243: Fixed arbitrary code execution via mpost during TeX document compilation bsc1028271...

Mageia: Security Advisory (MGASA-2024-0108)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0108 Updated texlive-20220321 packages fix security vulnerabilities

LuaTeX before 1.17.0 allows a document compiled with the default settings to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : TeX Live vulnerabilities (USN-6695-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6695-1 advisory. It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possib...

openSUSE: Security Advisory for texlive (SUSE-SU-2023:2284-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-25262

texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted TTF file...