Debian/texlive-bin: medium 5.5

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated

Action: Upgrade texlive-bin to 2022.20220321.62855-5.1+deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2023-32668
• https://security-tracker.debian.org/tracker/CVE-2023-32668

published 2023-05-11T06:15:10Z · modified 2026-10-23T18:04:24.490113035Z · JSON