The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user’s home directory.
CPE | Name | Operator | Version |
---|---|---|---|
texlive | eq | 6.20131226.0-r32488-fc20 | |
texlive | eq | 3.1.20140525-r34255.fc21 |