HCE2-SA-2024-0133 Low HCE 2.0 Security Fix(es): LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem. (CVE-2023-46049) HCE 2.0 llvm-12.0.1-2.r1.hce2.aarch64.rpm llvm-devel-12.0.1-2.r1.hce2.aarch64.rpm llvm-help-12.0.1-2.r1.hce2.noarch.rpm llvm-libs-12.0.1-2.r1.hce2.aarch64.rpm llvm-12.0.1-2.r1.hce2.x86_64.rpm llvm-devel-12.0.1-2.r1.hce2.x86_64.rpm llvm-libs-12.0.1-2.r1.hce2.x86_64.rpm