UbuntuUpdates.org

Package "texlive-bin"

Name: texlive-bin

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • TeX Live: path search library for TeX (development part)
  • TeX Live: path search library for TeX (runtime part)
  • TeX Live: ptex encoding library (development part)
  • TeX Live: pTeX encoding library

Latest version: 2013.20130729.30972-2ubuntu0.1
Release: trusty (14.04)
Level: security
Repository: main

Links

Save this URL for the latest version of "texlive-bin": https://www.ubuntuupdates.org/texlive-bin



Other versions of "texlive-bin" in Trusty

Repository Area Version
base main 2013.20130729.30972-2build3
updates main 2013.20130729.30972-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2013.20130729.30972-2ubuntu0.1 2018-10-11 19:06:20 UTC

  texlive-bin (2013.20130729.30972-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Symlink attack
    - debian/patches/CVE-2015-5700.patch: fix in
      texk/kpathsea/mktexlsr.
    - CVE-2015-5700
  * SECURITY UPDATE: Arbitrary code execution
    - debian/patches/CVE-2018-17407.patch: fix in
      texk/dvipsk/writet1.c, texk/web2c/luatexdir/font/writet1.w,
      texk/web2c/pdftexdir/writet1.c.
    - CVE-2018-17407

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 09 Oct 2018 13:50:26 -0300

CVE-2015-5700 mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.
CVE-2018-17407 An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling



About   -   Send Feedback to @ubuntu_updates