https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:43:00 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:3661 <p><strong>Affected:</strong> AlmaLinux:9: texlive, AlmaLinux:9: texlive-adjustbox, AlmaLinux:9: texlive-ae, AlmaLinux:9: texlive-algorithms, AlmaLinux:9: texlive-alphalph, AlmaLinux:9: texlive-amscls, AlmaLinux:9: texlive-amsfonts, AlmaLinux:9: texlive-amsmath, AlmaLinux:9: texlive-anyfontsize, AlmaLinux:9: texlive-anysize and 361 more</p> <p>The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.</p> <p>Security Fix(es):</p> <p>* texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: texlive, AlmaLinux:9: texlive-adjustbox, AlmaLinux:9: texlive-ae, AlmaLinux:9: texlive-algorithms, AlmaLinux:9: texlive-alphalph, AlmaLinux:9: texlive-amscls, AlmaLinux:9: texlive-amsfonts, AlmaLinux:9: texlive-amsmath, AlmaLinux:9: texlive-anyfontsize, AlmaLinux:9: texlive-anysize and 361 more</p> <p>The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.</p> <p>Security Fix(es):</p> <p>* texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:3661 https://cve.radiocsirt.org/vuln/bdu:2023-03875 bdu:2023-03875 https://cve.radiocsirt.org/vuln/bdu:2023-03875 https://cve.radiocsirt.org/vuln/euvd-2026-212961 EUVD-2026-212961 https://cve.radiocsirt.org/vuln/euvd-2026-212961 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32700 <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32700 https://cve.radiocsirt.org/vuln/ghsa-7xcp-5fvh-7fwm <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> https://cve.radiocsirt.org/vuln/ghsa-7xcp-5fvh-7fwm https://cve.radiocsirt.org/vuln/gsd-2023-32700 gsd-2023-32700 https://cve.radiocsirt.org/vuln/gsd-2023-32700 https://cve.radiocsirt.org/vuln/oesa-2023-1421 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: texlive-base, openEuler:20.03-LTS-SP3: texlive-base, openEuler:22.03-LTS: texlive-base, openEuler:22.03-LTS-SP1: texlive-base, openEuler:22.03-LTS-SP2: texlive-base</p> <p>The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.</p> <p>Security Fix(es):</p> <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.(CVE-2023-32700)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: texlive-base, openEuler:20.03-LTS-SP3: texlive-base, openEuler:22.03-LTS: texlive-base, openEuler:22.03-LTS-SP1: texlive-base, openEuler:22.03-LTS-SP2: texlive-base</p> <p>The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.</p> <p>Security Fix(es):</p> <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.(CVE-2023-32700)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1421 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12936-1 <p>libkpathsea6-6.3.5-90.1 on GA media</p> <p>libkpathsea6-6.3.5-90.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12936-1 https://cve.radiocsirt.org/vuln/suse-su-2023:2284-2 <p>Security update for texlive</p> <p>Security update for texlive</p> https://cve.radiocsirt.org/vuln/suse-su-2023:2284-2 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-32700 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: texlive-bin, Ubuntu:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin</p> <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: texlive-bin, Ubuntu:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin</p> <p>LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-32700 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1513 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle im texlive Paket von Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle im texlive Paket von Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1513