Red Hat Security AdvisoryRHSA-2023:3661
texlive security update
Released 2023-06-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.6) texlive-lib-devel-7:20180414-26.el8_6
- Red Hat CodeReady Linux Builder EUS (v.9.0) texlive-gnu-freefont-9:20200406-26.el9_0, texlive-lib-devel-9:20200406-26.el9_0
- Red Hat Enterprise Linux AppStream (v. 8) texlive-7:20180414-29.el8_8, texlive-adjustbox-7:20180414-29.el8_8, texlive-ae-7:20180414-29.el8_8 +47
- Red Hat Enterprise Linux AppStream (v. 9) texlive-9:20200406-26.el9_2, texlive-adjustbox-9:20200406-26.el9_2, texlive-ae-9:20200406-26.el9_2 +47
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) texlive-7:20180414-15.el8_2, texlive-adjustbox-7:20180414-15.el8_2, texlive-ae-7:20180414-15.el8_2 +47
- Red Hat Enterprise Linux AppStream AUS (v.8.4) texlive-7:20180414-21.el8_4, texlive-adjustbox-7:20180414-21.el8_4, texlive-ae-7:20180414-21.el8_4 +47
- Red Hat Enterprise Linux AppStream E4S (v. 8.1) texlive-7:20180414-15.el8_1, texlive-adjustbox-7:20180414-15.el8_1, texlive-ae-7:20180414-15.el8_1 +47
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) texlive-7:20180414-15.el8_2, texlive-adjustbox-7:20180414-15.el8_2, texlive-ae-7:20180414-15.el8_2 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.4) texlive-7:20180414-21.el8_4, texlive-adjustbox-7:20180414-21.el8_4, texlive-ae-7:20180414-21.el8_4 +47
- Red Hat Enterprise Linux AppStream EUS (v.8.6) texlive-7:20180414-26.el8_6, texlive-adjustbox-7:20180414-26.el8_6, texlive-ae-7:20180414-26.el8_6 +47
- Red Hat Enterprise Linux AppStream EUS (v.9.0) texlive-9:20200406-26.el9_0, texlive-adjustbox-9:20200406-26.el9_0, texlive-ae-9:20200406-26.el9_0 +47
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) texlive-7:20180414-15.el8_2, texlive-adjustbox-7:20180414-15.el8_2, texlive-ae-7:20180414-15.el8_2 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) texlive-7:20180414-21.el8_4, texlive-adjustbox-7:20180414-21.el8_4, texlive-ae-7:20180414-21.el8_4 +47
- Red Hat Enterprise Linux CRB (v. 8) texlive-lib-devel-7:20180414-29.el8_8
- Red Hat Enterprise Linux CRB (v. 9) texlive-gnu-freefont-9:20200406-26.el9_2, texlive-lib-devel-9:20200406-26.el9_2
Fixes 1 record
Priority HIGH 73
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00811 · Published 2023-05-20 · Partial fix CWE-77
