UbuntuUpdates.org

Package "libkpathsea6"

Name: libkpathsea6

Description:

TeX Live: path search library for TeX (runtime part)

Latest version: 2013.20130729.30972-2ubuntu0.1
Release: trusty (14.04)
Level: updates
Repository: main
Head package: texlive-bin
Homepage: http://www.tug.org/texlive/

Links


Download "libkpathsea6"


Other versions of "libkpathsea6" in Trusty

Repository Area Version
base main 2013.20130729.30972-2build3
security main 2013.20130729.30972-2ubuntu0.1

Changelog

Version: 2013.20130729.30972-2ubuntu0.1 2018-10-11 20:06:16 UTC

  texlive-bin (2013.20130729.30972-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Symlink attack
    - debian/patches/CVE-2015-5700.patch: fix in
      texk/kpathsea/mktexlsr.
    - CVE-2015-5700
  * SECURITY UPDATE: Arbitrary code execution
    - debian/patches/CVE-2018-17407.patch: fix in
      texk/dvipsk/writet1.c, texk/web2c/luatexdir/font/writet1.w,
      texk/web2c/pdftexdir/writet1.c.
    - CVE-2018-17407

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 09 Oct 2018 13:50:26 -0300

CVE-2015-5700 mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.
CVE-2018-17407 An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling



About   -   Send Feedback to @ubuntu_updates