Security update for texlive-filesystem (moderate)

openSUSE Security Update: Security update for texlive-filesystem Announcement ID: openSUSE-SU-2020:0368-1 Rating: moderate References: 1150556 1155381 1158910 1159740 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for...

SUSE-SU-2020:0520-1 Security update for texlive-filesystem

This update for texlive-filesystem fixes the following issues: Security issues fixed: - Changed default user for ls-R files and font cache directories to user nobody bsc1159740 - Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions bsc1158910 . - Made cron script more failsafe...

SUSE-SU-2020:0519-1 Security update for texlive-filesystem

This update for texlive-filesystem fixes the following issues: Security issues fixed: - Changed default user for ls-R files and font cache directories to user nobody bsc1159740 - Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions bsc1158910 . - Made cron script more failsafe...

Fedora 30 : 7:texlive-base (2020-fa1956e637)

Resolve buffer overflow in TexOpen function, CVE-2019-19601 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora: Security Advisory for texlive-base (FEDORA-2020-fa1956e637)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : 7:texlive-base (2020-bb5c663b83)

Resolve buffer overflow in TexOpen function, CVE-2019-19601 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora: Security Advisory for texlive-base (FEDORA-2020-bb5c663b83)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for texlive (EulerOS-SA-2019-1873)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for texlive (EulerOS-SA-2019-2062)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

Code injection

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

CVE-2019-18604

CVE-2019-18604 affects axohelp in axodraw2 (axohelp.c before 1.3; axodraw2 before 2.1.1b) as distributed in TeX Live and similar collections. The root cause is mishandling of sprintf, which Debian notes can lead to a stack overflow. Several connected advisories confirm affected packages and patch...

CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

EulerOS 2.0 SP3 : texlive (EulerOS-SA-2019-2062)

According to the version of the texlive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shellescapecommands in the texmf.cnf config...

EulerOS 2.0 SP2 : texlive (EulerOS-SA-2019-1873)

According to the version of the texlive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shellescapecommands in the texmf.cnf config...

SUSE-SU-2018:3033-3 Security update for texlive

This update for texlive fixes the following issue: - CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed arbitrary code execution when a malicious font was loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex bsc1109673...

openSUSE Security Update : texlive (openSUSE-2019-800)

This update for texlive fixes the following issue : - CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed arbitrary code execution when a malicious font was loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex bsc1109673. This update was imported fro...

SUSE SLES12 Security Update : texlive (SUSE-SU-2018:3033-2)

This update for texlive fixes the following issue : CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed arbitrary code execution when a malicious font was loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex bsc1109673 Note that Tenable Network...