Summary
It was discovered that TeX Live incorrectly handled certain
system commands. If a user were tricked into processing a
specially crafted TeX file, a remote attacker could execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | texlive-base | 2013.20140215-1ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | texlive-base | 2015.20160320-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_command…
References
-
report
https://ubuntu.com/security/CVE-2016-10243