CVE-2015-5700

CVE-2015-5700 affects mktexlsr (texlive): revisions 22855–36625 packaged in texlive allow local users to write to arbitrary files via a symlink attack. Root cause is a symlink vulnerability; this is tied to packaging in texlive. Some notices also reference a reversal of a fix (CVE-2015-5701). The...

CVE-2015-0296

The CVE-2015-0296 entry concerns the TeX Live package scripts. The pre-install script in texlive 3.1.20140525_r34255.fc21 (Fedora 21) and texlive 6.20131226_r32488.fc20 (and related RPMs) allows an unprivileged local user to delete arbitrary files by placing a crafted file in the user’s home dire...

CVE-2015-5701

CVE-2015-5701 concerns mktexlsr in texlive. The vulnerability affects mktexlsr revision 36855 and earlier revisions 36626 as packaged in texlive, allowing local users to write to arbitrary files via a symlink attack. The issue arises from the reversion of the fix for CVE-2015-5700. No exploitatio...