https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:42:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04366 bdu:2024-04366 https://cve.radiocsirt.org/vuln/bdu:2024-04366 https://cve.radiocsirt.org/vuln/euvd-2026-258428 EUVD-2026-258428 https://cve.radiocsirt.org/vuln/euvd-2026-258428 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32668 <p>LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> <p>LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32668 https://cve.radiocsirt.org/vuln/ghsa-hm67-jh95-48xh <p>LuaTeX before 1.17.0 enables the socket library by default.</p> <p>LuaTeX before 1.17.0 enables the socket library by default.</p> https://cve.radiocsirt.org/vuln/ghsa-hm67-jh95-48xh https://cve.radiocsirt.org/vuln/gsd-2023-32668 gsd-2023-32668 https://cve.radiocsirt.org/vuln/gsd-2023-32668 https://cve.radiocsirt.org/vuln/oesa-2025-2694 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: texlive-base, openEuler:20.03-LTS-SP4: texlive-base, openEuler:22.03-LTS-SP3: texlive-base, openEuler:22.03-LTS-SP4: texlive-base, openEuler:24.03-LTS: texlive-base, openEuler:24.03-LTS-SP1: texlive-base</p> <p>The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries. Security Fix(es):</p> <p>LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.(CVE-2023-32668)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: texlive-base, openEuler:20.03-LTS-SP4: texlive-base, openEuler:22.03-LTS-SP3: texlive-base, openEuler:22.03-LTS-SP4: texlive-base, openEuler:24.03-LTS: texlive-base, openEuler:24.03-LTS-SP1: texlive-base</p> <p>The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries. Security Fix(es):</p> <p>LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.(CVE-2023-32668)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2694 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12936-1 <p>libkpathsea6-6.3.5-90.1 on GA media</p> <p>libkpathsea6-6.3.5-90.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12936-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-32668 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: texlive-bin, Ubuntu:Pro:18.04:LTS: texlive-bin, Ubuntu:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin</p> <p>LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: texlive-bin, Ubuntu:Pro:18.04:LTS: texlive-bin, Ubuntu:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin</p> <p>LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-32668