Debian/texlive-bin: medium 5.5

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated

Action: Upgrade texlive-bin to 2022.20220321.62855-6 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2023-32668#Debian:14/texlive-bin
• https://security-tracker.debian.org/tracker/CVE-2023-32668

published 2023-05-11T06:15:10Z · modified 2026-10-26T18:03:05.067790499Z · JSON