Skip to content
OpenAdvisories
Unscored RHSA-2012:0137 6 CVEs

Red Hat Security Advisory: texlive security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 52

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client kpathsea 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client kpathsea-devel 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client mendexk 0:2.6e-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-afm 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-context 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-debuginfo 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-dvips 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-dviutils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-east-asian 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-latex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-utils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client texlive-xetex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode kpathsea 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode kpathsea-devel 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode mendexk 0:2.6e-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-afm 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-context 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-debuginfo 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-dvips 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-dviutils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-east-asian 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-latex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-utils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode texlive-xetex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server kpathsea 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server kpathsea-devel 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server mendexk 0:2.6e-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-afm 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-context 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-debuginfo 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-dvips 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-dviutils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-east-asian 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-latex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-utils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server texlive-xetex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation kpathsea 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation kpathsea-devel 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation mendexk 0:2.6e-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-afm 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-context 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-debuginfo 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-dvips 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-dviutils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-east-asian 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-latex 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-utils 0:2007-57.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation texlive-xetex 0:2007-57.el6_2

Vulnerabilities 6

  • Unscored —
    CVE-2010-2642 EPSS 14%

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t…

  • Unscored —

    Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and …

  • Unscored —
    CVE-2011-0764 EPSS 13%

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunct…

  • Unscored —
    CVE-2011-1552 EPSS 10%

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations…

  • Unscored —

    Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, all…

  • Unscored —

    Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote a…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=666318
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=679732
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692853
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692854
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692856
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692909
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0137.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2642
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2642
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2642
  • report
    https://access.redhat.com/security/cve/CVE-2011-0433
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0433
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0433
  • report
    https://access.redhat.com/security/cve/CVE-2011-0764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0764
  • report
    https://access.redhat.com/security/cve/CVE-2011-1552
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1552
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1552
  • report
    https://access.redhat.com/security/cve/CVE-2011-1553
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1553
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1553
  • report
    https://access.redhat.com/security/cve/CVE-2011-1554
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1554
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1554