Debian/texlive-bin: high 7.8
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accesse
Action: Upgrade texlive-bin to 2022.20220321.62855-5.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2022.20220321.62855-5.1 | - |
Fixed versions
| 2022.20220321.62855-5.1 |
Sources
published · modified · JSON