vulnerability
Alma Linux: CVE-2023-32700: Important: texlive security update (ALSA-2023-3661)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | May 20, 2023 | Jun 27, 2023 | Jan 28, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
May 20, 2023
Added
Jun 27, 2023
Modified
Jan 28, 2025
Description
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.
Solution(s)
alma-upgrade-texlivealma-upgrade-texlive-adjustboxalma-upgrade-texlive-aealma-upgrade-texlive-algorithmsalma-upgrade-texlive-alphalphalma-upgrade-texlive-amsclsalma-upgrade-texlive-amsfontsalma-upgrade-texlive-amsmathalma-upgrade-texlive-anyfontsizealma-upgrade-texlive-anysizealma-upgrade-texlive-appendixalma-upgrade-texlive-arabxetexalma-upgrade-texlive-arphicalma-upgrade-texlive-atbegshialma-upgrade-texlive-attachfilealma-upgrade-texlive-attachfile2alma-upgrade-texlive-atveryendalma-upgrade-texlive-auxhookalma-upgrade-texlive-avantgaralma-upgrade-texlive-awesomeboxalma-upgrade-texlive-babelalma-upgrade-texlive-babel-englishalma-upgrade-texlive-babelbibalma-upgrade-texlive-basealma-upgrade-texlive-beameralma-upgrade-texlive-beraalma-upgrade-texlive-betonalma-upgrade-texlive-bibtexalma-upgrade-texlive-bibtopicalma-upgrade-texlive-bidialma-upgrade-texlive-bigfootalma-upgrade-texlive-bigintcalcalma-upgrade-texlive-bitsetalma-upgrade-texlive-bookmanalma-upgrade-texlive-bookmarkalma-upgrade-texlive-booktabsalma-upgrade-texlive-breakurlalma-upgrade-texlive-breqnalma-upgrade-texlive-capt-ofalma-upgrade-texlive-captionalma-upgrade-texlive-carlislealma-upgrade-texlive-catchfilealma-upgrade-texlive-changebaralma-upgrade-texlive-changepagealma-upgrade-texlive-charteralma-upgrade-texlive-chngcntralma-upgrade-texlive-citealma-upgrade-texlive-cjkalma-upgrade-texlive-classpackalma-upgrade-texlive-cmalma-upgrade-texlive-cm-lgcalma-upgrade-texlive-cm-superalma-upgrade-texlive-cmapalma-upgrade-texlive-cmextraalma-upgrade-texlive-cnsalma-upgrade-texlive-collectboxalma-upgrade-texlive-collection-basicalma-upgrade-texlive-collection-fontsrecommendedalma-upgrade-texlive-collection-htmlxmlalma-upgrade-texlive-collection-latexalma-upgrade-texlive-collection-latexrecommendedalma-upgrade-texlive-collection-xetexalma-upgrade-texlive-colorprofilesalma-upgrade-texlive-colortblalma-upgrade-texlive-contextalma-upgrade-texlive-courieralma-upgrade-texlive-cropalma-upgrade-texlive-csquotesalma-upgrade-texlive-ctablealma-upgrade-texlive-ctablestackalma-upgrade-texlive-currfilealma-upgrade-texlive-datetimealma-upgrade-texlive-dehyphalma-upgrade-texlive-dvipdfmxalma-upgrade-texlive-dvipngalma-upgrade-texlive-dvipsalma-upgrade-texlive-dvisvgmalma-upgrade-texlive-ecalma-upgrade-texlive-eepicalma-upgrade-texlive-enctexalma-upgrade-texlive-enumitemalma-upgrade-texlive-environalma-upgrade-texlive-epsfalma-upgrade-texlive-epstopdfalma-upgrade-texlive-epstopdf-pkgalma-upgrade-texlive-eqparboxalma-upgrade-texlive-eso-picalma-upgrade-texlive-etexalma-upgrade-texlive-etex-pkgalma-upgrade-texlive-etexcmdsalma-upgrade-texlive-etocalma-upgrade-texlive-etoolboxalma-upgrade-texlive-euencalma-upgrade-texlive-euleralma-upgrade-texlive-euroalma-upgrade-texlive-eurosymalma-upgrade-texlive-extsizesalma-upgrade-texlive-fancyboxalma-upgrade-texlive-fancyhdralma-upgrade-texlive-fancyrefalma-upgrade-texlive-fancyvrbalma-upgrade-texlive-filecontentsalma-upgrade-texlive-filehookalma-upgrade-texlive-finstrutalma-upgrade-texlive-fix2colalma-upgrade-texlive-fixlatvianalma-upgrade-texlive-floatalma-upgrade-texlive-fmtcountalma-upgrade-texlive-fncychapalma-upgrade-texlive-fontawesomealma-upgrade-texlive-fontbookalma-upgrade-texlive-fonts-tlwgalma-upgrade-texlive-fontspecalma-upgrade-texlive-fontwarealma-upgrade-texlive-fontwrapalma-upgrade-texlive-footmiscalma-upgrade-texlive-footnotehyperalma-upgrade-texlive-fpalma-upgrade-texlive-fplalma-upgrade-texlive-framedalma-upgrade-texlive-garuda-c90alma-upgrade-texlive-geometryalma-upgrade-texlive-gettitlestringalma-upgrade-texlive-glyphlistalma-upgrade-texlive-gnu-freefontalma-upgrade-texlive-graphicsalma-upgrade-texlive-graphics-cfgalma-upgrade-texlive-graphics-defalma-upgrade-texlive-grfextalma-upgrade-texlive-grffilealma-upgrade-texlive-gsftopkalma-upgrade-texlive-hangingalma-upgrade-texlive-helveticalma-upgrade-texlive-hobsubalma-upgrade-texlive-hologoalma-upgrade-texlive-hycoloralma-upgrade-texlive-hyperrefalma-upgrade-texlive-hyph-utf8alma-upgrade-texlive-hyphen-basealma-upgrade-texlive-hyphenatalma-upgrade-texlive-hyphenexalma-upgrade-texlive-ifmtargalma-upgrade-texlive-ifoddpagealma-upgrade-texlive-ifplatformalma-upgrade-texlive-iftexalma-upgrade-texlive-importalma-upgrade-texlive-indexalma-upgrade-texlive-infwarerralma-upgrade-texlive-intcalcalma-upgrade-texlive-jadetexalma-upgrade-texlive-jknapltxalma-upgrade-texlive-kastrupalma-upgrade-texlive-kerkisalma-upgrade-texlive-knuth-libalma-upgrade-texlive-knuth-localalma-upgrade-texlive-koma-scriptalma-upgrade-texlive-kpathseaalma-upgrade-texlive-kvdefinekeysalma-upgrade-texlive-kvoptionsalma-upgrade-texlive-kvsetkeysalma-upgrade-texlive-l3backendalma-upgrade-texlive-l3experimentalalma-upgrade-texlive-l3kernelalma-upgrade-texlive-l3packagesalma-upgrade-texlive-lastpagealma-upgrade-texlive-latexalma-upgrade-texlive-latex-fontsalma-upgrade-texlive-latex2manalma-upgrade-texlive-latexbugalma-upgrade-texlive-latexconfigalma-upgrade-texlive-letltxmacroalma-upgrade-texlive-lettrinealma-upgrade-texlive-libalma-upgrade-texlive-lib-develalma-upgrade-texlive-linegoalalma-upgrade-texlive-linenoalma-upgrade-texlive-listingsalma-upgrade-texlive-listofitemsalma-upgrade-texlive-lmalma-upgrade-texlive-lm-mathalma-upgrade-texlive-ltabptchalma-upgrade-texlive-ltxcmdsalma-upgrade-texlive-ltxmiscalma-upgrade-texlive-lua-alt-getoptalma-upgrade-texlive-luahbtexalma-upgrade-texlive-lualatex-mathalma-upgrade-texlive-lualibsalma-upgrade-texlive-luaotfloadalma-upgrade-texlive-luatexalma-upgrade-texlive-luatex85alma-upgrade-texlive-luatexbasealma-upgrade-texlive-lwarpalma-upgrade-texlive-makecmdsalma-upgrade-texlive-makeindexalma-upgrade-texlive-manfnt-fontalma-upgrade-texlive-marginnotealma-upgrade-texlive-marvosymalma-upgrade-texlive-mathpazoalma-upgrade-texlive-mathspecalma-upgrade-texlive-mathtoolsalma-upgrade-texlive-mdwtoolsalma-upgrade-texlive-memoiralma-upgrade-texlive-metafontalma-upgrade-texlive-metalogoalma-upgrade-texlive-metapostalma-upgrade-texlive-mflogoalma-upgrade-texlive-mflogo-fontalma-upgrade-texlive-mfnfssalma-upgrade-texlive-mfwarealma-upgrade-texlive-microtypealma-upgrade-texlive-minitocalma-upgrade-texlive-mnsymbolalma-upgrade-texlive-modesalma-upgrade-texlive-mparhackalma-upgrade-texlive-mptopdfalma-upgrade-texlive-msalma-upgrade-texlive-multidoalma-upgrade-texlive-multirowalma-upgrade-texlive-natbibalma-upgrade-texlive-ncctoolsalma-upgrade-texlive-ncntrsbkalma-upgrade-texlive-needspacealma-upgrade-texlive-newfloatalma-upgrade-texlive-newunicodecharalma-upgrade-texlive-norasi-c90alma-upgrade-texlive-notoccitealma-upgrade-texlive-ntgclassalma-upgrade-texlive-oberdiekalma-upgrade-texlive-obsoletealma-upgrade-texlive-overpicalma-upgrade-texlive-palatinoalma-upgrade-texlive-paralistalma-upgrade-texlive-parallelalma-upgrade-texlive-parskipalma-upgrade-texlive-passivetexalma-upgrade-texlive-pdfcolmkalma-upgrade-texlive-pdfescapealma-upgrade-texlive-pdflscapealma-upgrade-texlive-pdfpagesalma-upgrade-texlive-pdftexalma-upgrade-texlive-pdftexcmdsalma-upgrade-texlive-pgfalma-upgrade-texlive-philokaliaalma-upgrade-texlive-placeinsalma-upgrade-texlive-plainalma-upgrade-texlive-polyglossiaalma-upgrade-texlive-powerdotalma-upgrade-texlive-preprintalma-upgrade-texlive-psfragalma-upgrade-texlive-pslatexalma-upgrade-texlive-psnfssalma-upgrade-texlive-pspicturealma-upgrade-texlive-pst-3dalma-upgrade-texlive-pst-arrowalma-upgrade-texlive-pst-bluralma-upgrade-texlive-pst-coilalma-upgrade-texlive-pst-epsalma-upgrade-texlive-pst-fillalma-upgrade-texlive-pst-gradalma-upgrade-texlive-pst-mathalma-upgrade-texlive-pst-nodealma-upgrade-texlive-pst-plotalma-upgrade-texlive-pst-slpealma-upgrade-texlive-pst-textalma-upgrade-texlive-pst-toolsalma-upgrade-texlive-pst-treealma-upgrade-texlive-pstricksalma-upgrade-texlive-pstricks-addalma-upgrade-texlive-ptextalma-upgrade-texlive-pxfontsalma-upgrade-texlive-qstestalma-upgrade-texlive-ragged2ealma-upgrade-texlive-rcsalma-upgrade-texlive-realscriptsalma-upgrade-texlive-refcountalma-upgrade-texlive-rerunfilecheckalma-upgrade-texlive-rsfsalma-upgrade-texlive-sansmathalma-upgrade-texlive-sansmathaccentalma-upgrade-texlive-sauerjalma-upgrade-texlive-scheme-basicalma-upgrade-texlive-sectionalma-upgrade-texlive-sectstyalma-upgrade-texlive-seminaralma-upgrade-texlive-sepnumalma-upgrade-texlive-setspacealma-upgrade-texlive-showexplalma-upgrade-texlive-soulalma-upgrade-texlive-stackenginealma-upgrade-texlive-stmaryrdalma-upgrade-texlive-stringencalma-upgrade-texlive-subfigalma-upgrade-texlive-subfigurealma-upgrade-texlive-svn-provalma-upgrade-texlive-symbolalma-upgrade-texlive-t2alma-upgrade-texlive-tabualma-upgrade-texlive-tabularyalma-upgrade-texlive-texalma-upgrade-texlive-tex-gyrealma-upgrade-texlive-tex-gyre-mathalma-upgrade-texlive-tex-ini-filesalma-upgrade-texlive-tex4htalma-upgrade-texlive-texlive-common-docalma-upgrade-texlive-texlive-docindexalma-upgrade-texlive-texlive-enalma-upgrade-texlive-texlive-msg-translationsalma-upgrade-texlive-texlive-scriptsalma-upgrade-texlive-texlive-scripts-extraalma-upgrade-texlive-texlive.infraalma-upgrade-texlive-textcasealma-upgrade-texlive-textposalma-upgrade-texlive-threeparttablealma-upgrade-texlive-thumbpdfalma-upgrade-texlive-timesalma-upgrade-texlive-tipaalma-upgrade-texlive-titlesecalma-upgrade-texlive-titlingalma-upgrade-texlive-tocloftalma-upgrade-texlive-toolsalma-upgrade-texlive-translatoralma-upgrade-texlive-trimspacesalma-upgrade-texlive-txfontsalma-upgrade-texlive-type1cmalma-upgrade-texlive-typehtmlalma-upgrade-texlive-ucharcatalma-upgrade-texlive-ucharclassesalma-upgrade-texlive-ucsalma-upgrade-texlive-uhcalma-upgrade-texlive-ulemalma-upgrade-texlive-underscorealma-upgrade-texlive-unicode-dataalma-upgrade-texlive-unicode-mathalma-upgrade-texlive-uniquecounteralma-upgrade-texlive-unisugaralma-upgrade-texlive-updmap-mapalma-upgrade-texlive-upquotealma-upgrade-texlive-urlalma-upgrade-texlive-utopiaalma-upgrade-texlive-varwidthalma-upgrade-texlive-wadalabalma-upgrade-texlive-wasalma-upgrade-texlive-wasyalma-upgrade-texlive-wasy-type1alma-upgrade-texlive-wasysymalma-upgrade-texlive-wrapfigalma-upgrade-texlive-xcoloralma-upgrade-texlive-xdvialma-upgrade-texlive-xecjkalma-upgrade-texlive-xecoloralma-upgrade-texlive-xecyralma-upgrade-texlive-xeindexalma-upgrade-texlive-xepersianalma-upgrade-texlive-xesearchalma-upgrade-texlive-xetexalma-upgrade-texlive-xetex-itransalma-upgrade-texlive-xetex-pstricksalma-upgrade-texlive-xetex-tibetanalma-upgrade-texlive-xetexconfigalma-upgrade-texlive-xetexfontinfoalma-upgrade-texlive-xifthenalma-upgrade-texlive-xkeyvalalma-upgrade-texlive-xltxtraalma-upgrade-texlive-xmltexalma-upgrade-texlive-xmltexconfigalma-upgrade-texlive-xstringalma-upgrade-texlive-xtabalma-upgrade-texlive-xunicodealma-upgrade-texlive-zapfchanalma-upgrade-texlive-zapfdingalma-upgrade-texlive-zref
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.