HCE3-SA-2025-0162 Important HCE 3.0 Security Fix(es): TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability problem. (CVE-2023-46051) LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5. (CVE-2023-32700) Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem. (CVE-2023-46048) HCE 3.0 texlive-base-20210325-9.hce3.x86_64.rpm texlive-bibtex-20210325-9.hce3.x86_64.rpm texlive-dvipdfmx-20210325-9.hce3.x86_64.rpm texlive-dvips-20210325-9.hce3.x86_64.rpm texlive-epstopdf-20210325-9.hce3.noarch.rpm texlive-glyphlist-20210325-9.hce3.noarch.rpm texlive-gsftopk-20210325-9.hce3.x86_64.rpm texlive-kpathsea-20210325-9.hce3.x86_64.rpm texlive-lib-20210325-9.hce3.x86_64.rpm texlive-luatex-20210325-9.hce3.x86_64.rpm texlive-makeindex-20210325-9.hce3.x86_64.rpm texlive-metafont-20210325-9.hce3.x86_64.rpm texlive-mfware-20210325-9.hce3.x86_64.rpm texlive-pdftex-20210325-9.hce3.x86_64.rpm texlive-texlive.infra-20210325-9.hce3.noarch.rpm texlive-texlive-en-20210325-9.hce3.noarch.rpm texlive-texlive-scripts-20210325-9.hce3.noarch.rpm texlive-tex-20210325-9.hce3.x86_64.rpm texlive-xdvi-20210325-9.hce3.x86_64.rpm texlive-base-20210325-9.hce3.aarch64.rpm texlive-bibtex-20210325-9.hce3.aarch64.rpm texlive-dvipdfmx-20210325-9.hce3.aarch64.rpm texlive-dvips-20210325-9.hce3.aarch64.rpm texlive-gsftopk-20210325-9.hce3.aarch64.rpm texlive-kpathsea-20210325-9.hce3.aarch64.rpm texlive-lib-20210325-9.hce3.aarch64.rpm texlive-luatex-20210325-9.hce3.aarch64.rpm texlive-makeindex-20210325-9.hce3.aarch64.rpm texlive-metafont-20210325-9.hce3.aarch64.rpm texlive-mfware-20210325-9.hce3.aarch64.rpm texlive-pdftex-20210325-9.hce3.aarch64.rpm texlive-tex-20210325-9.hce3.aarch64.rpm texlive-xdvi-20210325-9.hce3.aarch64.rpm