TeX Live: Multiple vulnerabilities Multiple vulnerabilities were found in texlive-core, allowing attackers to execute arbitrary code. TeX Live June 25, 2012 June 25, 2012: 1 264598 324019 remote 2009-r2 2009-r2

TeX Live is a complete TeX distribution.

Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details.

These vulnerabilities might allow user-assisted remote attackers to execute arbitrary code via a specially-crafted DVI file, or cause a Denial of Service.

There is no known workaround at this time.

All texlive-core users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/texlive-core-2009-r2" CVE-2009-1284 CVE-2010-0739 CVE-2010-0827 CVE-2010-1440 underling craig