Unscored CVE-2015-0296 EUVD-2015-0309GHSA-8vr6-57gw-vwjf

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm all…

Published Oct 6, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

References

FEDORA-2015-4332 vendor-advisory
72826 vdb-entry
FEDORA-2015-4872 vendor-advisory
[oss-security] 20150227 CVE-2015-0296 preinstall scriptlet in texlive-base rpm of fedora allows unprivileged user to delete arbitrary files(maybe others) mailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=1197082