Tug Tex Live vulnerabilities

• tug tex live Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is... CVE-2023-46048 Fix availableDisputed 6.2 MediumMarch 27, 2024
• tug tex live texlive-bin commit c515e was discovered to contain heap buffer overflow via the function... CVE-2024-25262 Fix available 8.1 HighFebruary 20, 2024
• luatex project luatex, miktex, tug tex live +2 more LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file... CVE-2023-32700 Fix available 7.8 HighMay 20, 2023
• luatex project luatex, miktex, tug tex live +2 more LuaTeX before 1.17.0 enables the socket library by default. CVE-2023-32668 Fix available 5.5 MediumMay 11, 2023
• tug tex live, canonical ubuntu linux, debian linux +2 more An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live... CVE-2018-17407 Fix available 7.8 HighSeptember 21, 2018
• tug tex live TeX Live through 20170524 does not validate strings before launching the program specified by the... CVE-2017-17513 8.8 HighDecember 14, 2017
• tug tex live, debian linux, fedoraproject fedora +2 more TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost... CVE-2016-10243 Fix available 9.8 CriticalMarch 7, 2017
• tug tetex, tex live +1 more Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX... CVE-2010-1440 Fix available 6.8 MediumMay 7, 2010
• tug tetex, tex live +1 more Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to... CVE-2010-0827 Fix available 6.8 MediumMay 7, 2010
• tug tetex, tex live +1 more Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2)... CVE-2010-0739 Fix available 6.8 MediumApril 16, 2010