p PatchFirst

CVE-2015-5700

CVE-2015-5700

This page contains facts from public vulnerability sources. Check the original advisory before updating.

mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.

CVSS 6.1 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • texlive-bin Debian:12

    Affected ranges
    • ECOSYSTEM: < 2014.20140926.35254-5

    Update to 2014.20140926.35254-5

  • texlive-bin Debian:13

    Affected ranges
    • ECOSYSTEM: < 2014.20140926.35254-5

    Update to 2014.20140926.35254-5

  • texlive-bin Debian:14

    Affected ranges
    • ECOSYSTEM: < 2014.20140926.35254-5

    Update to 2014.20140926.35254-5

  • texlive-bin Ubuntu:14.04:LTS

    Versions
    • 2013.20130529.30792-1build2
    • 2013.20130729.30972-2
    • 2013.20130729.30972-2build1
    • 2013.20130729.30972-2build2
    • 2013.20130729.30972-2build3
    Affected ranges
    • ECOSYSTEM: < 2013.20130729.30972-2ubuntu0.1

    Update to 2013.20130729.30972-2ubuntu0.1

Original sources

Check your server →