vulnerability
CentOS Linux: CVE-2023-32700: Important: texlive security update (CESA-2023:3661)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | 2023-05-20 | 2023-06-20 | 2025-01-28 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
2023-05-20
Added
2023-06-20
Modified
2025-01-28
Description
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.
Solution(s)
centos-upgrade-texlivecentos-upgrade-texlive-adjustboxcentos-upgrade-texlive-aecentos-upgrade-texlive-algorithmscentos-upgrade-texlive-alphalphcentos-upgrade-texlive-amsclscentos-upgrade-texlive-amsfontscentos-upgrade-texlive-amsmathcentos-upgrade-texlive-anyfontsizecentos-upgrade-texlive-anysizecentos-upgrade-texlive-appendixcentos-upgrade-texlive-arabxetexcentos-upgrade-texlive-arphiccentos-upgrade-texlive-atbegshicentos-upgrade-texlive-attachfilecentos-upgrade-texlive-attachfile2centos-upgrade-texlive-atveryendcentos-upgrade-texlive-auxhookcentos-upgrade-texlive-avantgarcentos-upgrade-texlive-awesomeboxcentos-upgrade-texlive-babelcentos-upgrade-texlive-babel-englishcentos-upgrade-texlive-babelbibcentos-upgrade-texlive-basecentos-upgrade-texlive-beamercentos-upgrade-texlive-beracentos-upgrade-texlive-betoncentos-upgrade-texlive-bibtexcentos-upgrade-texlive-bibtex-debuginfocentos-upgrade-texlive-bibtopiccentos-upgrade-texlive-bidicentos-upgrade-texlive-bigfootcentos-upgrade-texlive-bigintcalccentos-upgrade-texlive-bitsetcentos-upgrade-texlive-bookmancentos-upgrade-texlive-bookmarkcentos-upgrade-texlive-booktabscentos-upgrade-texlive-breakurlcentos-upgrade-texlive-breqncentos-upgrade-texlive-capt-ofcentos-upgrade-texlive-captioncentos-upgrade-texlive-carlislecentos-upgrade-texlive-catchfilecentos-upgrade-texlive-changebarcentos-upgrade-texlive-changepagecentos-upgrade-texlive-chartercentos-upgrade-texlive-chngcntrcentos-upgrade-texlive-citecentos-upgrade-texlive-cjkcentos-upgrade-texlive-classpackcentos-upgrade-texlive-cmcentos-upgrade-texlive-cm-lgccentos-upgrade-texlive-cm-supercentos-upgrade-texlive-cmapcentos-upgrade-texlive-cmextracentos-upgrade-texlive-cnscentos-upgrade-texlive-collectboxcentos-upgrade-texlive-collection-basiccentos-upgrade-texlive-collection-fontsrecommendedcentos-upgrade-texlive-collection-htmlxmlcentos-upgrade-texlive-collection-latexcentos-upgrade-texlive-collection-latexrecommendedcentos-upgrade-texlive-collection-xetexcentos-upgrade-texlive-colorprofilescentos-upgrade-texlive-colortblcentos-upgrade-texlive-contextcentos-upgrade-texlive-couriercentos-upgrade-texlive-cropcentos-upgrade-texlive-csquotescentos-upgrade-texlive-ctablecentos-upgrade-texlive-ctablestackcentos-upgrade-texlive-currfilecentos-upgrade-texlive-datetimecentos-upgrade-texlive-debuginfocentos-upgrade-texlive-debugsourcecentos-upgrade-texlive-dehyphcentos-upgrade-texlive-dvipdfmxcentos-upgrade-texlive-dvipngcentos-upgrade-texlive-dvipng-debuginfocentos-upgrade-texlive-dvipscentos-upgrade-texlive-dvips-debuginfocentos-upgrade-texlive-dvisvgmcentos-upgrade-texlive-dvisvgm-debuginfocentos-upgrade-texlive-eccentos-upgrade-texlive-eepiccentos-upgrade-texlive-enctexcentos-upgrade-texlive-enumitemcentos-upgrade-texlive-environcentos-upgrade-texlive-epsfcentos-upgrade-texlive-epstopdfcentos-upgrade-texlive-epstopdf-pkgcentos-upgrade-texlive-eqparboxcentos-upgrade-texlive-eso-piccentos-upgrade-texlive-etexcentos-upgrade-texlive-etex-pkgcentos-upgrade-texlive-etexcmdscentos-upgrade-texlive-etoccentos-upgrade-texlive-etoolboxcentos-upgrade-texlive-euenccentos-upgrade-texlive-eulercentos-upgrade-texlive-eurocentos-upgrade-texlive-eurosymcentos-upgrade-texlive-extsizescentos-upgrade-texlive-fancyboxcentos-upgrade-texlive-fancyhdrcentos-upgrade-texlive-fancyrefcentos-upgrade-texlive-fancyvrbcentos-upgrade-texlive-filecontentscentos-upgrade-texlive-filehookcentos-upgrade-texlive-finstrutcentos-upgrade-texlive-fix2colcentos-upgrade-texlive-fixlatviancentos-upgrade-texlive-floatcentos-upgrade-texlive-fmtcountcentos-upgrade-texlive-fncychapcentos-upgrade-texlive-fontawesomecentos-upgrade-texlive-fontbookcentos-upgrade-texlive-fonts-tlwgcentos-upgrade-texlive-fontspeccentos-upgrade-texlive-fontwarecentos-upgrade-texlive-fontware-debuginfocentos-upgrade-texlive-fontwrapcentos-upgrade-texlive-footmisccentos-upgrade-texlive-footnotehypercentos-upgrade-texlive-fpcentos-upgrade-texlive-fplcentos-upgrade-texlive-framedcentos-upgrade-texlive-garuda-c90centos-upgrade-texlive-geometrycentos-upgrade-texlive-gettitlestringcentos-upgrade-texlive-glyphlistcentos-upgrade-texlive-graphicscentos-upgrade-texlive-graphics-cfgcentos-upgrade-texlive-graphics-defcentos-upgrade-texlive-grfextcentos-upgrade-texlive-grffilecentos-upgrade-texlive-gsftopkcentos-upgrade-texlive-gsftopk-debuginfocentos-upgrade-texlive-hangingcentos-upgrade-texlive-helveticcentos-upgrade-texlive-hobsubcentos-upgrade-texlive-hologocentos-upgrade-texlive-hycolorcentos-upgrade-texlive-hyperrefcentos-upgrade-texlive-hyph-utf8centos-upgrade-texlive-hyphen-basecentos-upgrade-texlive-hyphenatcentos-upgrade-texlive-hyphenexcentos-upgrade-texlive-ifetexcentos-upgrade-texlive-ifluatexcentos-upgrade-texlive-ifmtargcentos-upgrade-texlive-ifoddpagecentos-upgrade-texlive-ifplatformcentos-upgrade-texlive-iftexcentos-upgrade-texlive-ifxetexcentos-upgrade-texlive-importcentos-upgrade-texlive-indexcentos-upgrade-texlive-infwarerrcentos-upgrade-texlive-intcalccentos-upgrade-texlive-jadetexcentos-upgrade-texlive-jknapltxcentos-upgrade-texlive-kastrupcentos-upgrade-texlive-kerkiscentos-upgrade-texlive-knuth-libcentos-upgrade-texlive-knuth-localcentos-upgrade-texlive-koma-scriptcentos-upgrade-texlive-kpathseacentos-upgrade-texlive-kpathsea-debuginfocentos-upgrade-texlive-kvdefinekeyscentos-upgrade-texlive-kvoptionscentos-upgrade-texlive-kvsetkeyscentos-upgrade-texlive-l3backendcentos-upgrade-texlive-l3experimentalcentos-upgrade-texlive-l3kernelcentos-upgrade-texlive-l3packagescentos-upgrade-texlive-lastpagecentos-upgrade-texlive-latexcentos-upgrade-texlive-latex-fontscentos-upgrade-texlive-latex2mancentos-upgrade-texlive-latexbugcentos-upgrade-texlive-latexconfigcentos-upgrade-texlive-letltxmacrocentos-upgrade-texlive-lettrinecentos-upgrade-texlive-libcentos-upgrade-texlive-lib-debuginfocentos-upgrade-texlive-linegoalcentos-upgrade-texlive-linenocentos-upgrade-texlive-listingscentos-upgrade-texlive-listofitemscentos-upgrade-texlive-lmcentos-upgrade-texlive-lm-mathcentos-upgrade-texlive-ltabptchcentos-upgrade-texlive-ltxcmdscentos-upgrade-texlive-ltxmisccentos-upgrade-texlive-lua-alt-getoptcentos-upgrade-texlive-luahbtexcentos-upgrade-texlive-luahbtex-debuginfocentos-upgrade-texlive-luajittex-debuginfocentos-upgrade-texlive-lualatex-mathcentos-upgrade-texlive-lualibscentos-upgrade-texlive-luaotfloadcentos-upgrade-texlive-luatexcentos-upgrade-texlive-luatex-debuginfocentos-upgrade-texlive-luatex85centos-upgrade-texlive-luatexbasecentos-upgrade-texlive-lwarpcentos-upgrade-texlive-makecmdscentos-upgrade-texlive-makeindexcentos-upgrade-texlive-makeindex-debuginfocentos-upgrade-texlive-manfnt-fontcentos-upgrade-texlive-marginnotecentos-upgrade-texlive-marvosymcentos-upgrade-texlive-mathpazocentos-upgrade-texlive-mathspeccentos-upgrade-texlive-mathtoolscentos-upgrade-texlive-mdwtoolscentos-upgrade-texlive-memoircentos-upgrade-texlive-metafontcentos-upgrade-texlive-metafont-debuginfocentos-upgrade-texlive-metalogocentos-upgrade-texlive-metapostcentos-upgrade-texlive-metapost-debuginfocentos-upgrade-texlive-mflogocentos-upgrade-texlive-mflogo-fontcentos-upgrade-texlive-mfnfsscentos-upgrade-texlive-mfwarecentos-upgrade-texlive-mfware-debuginfocentos-upgrade-texlive-microtypecentos-upgrade-texlive-minitoccentos-upgrade-texlive-mnsymbolcentos-upgrade-texlive-modescentos-upgrade-texlive-mparhackcentos-upgrade-texlive-mptopdfcentos-upgrade-texlive-mscentos-upgrade-texlive-multidocentos-upgrade-texlive-multirowcentos-upgrade-texlive-natbibcentos-upgrade-texlive-ncctoolscentos-upgrade-texlive-ncntrsbkcentos-upgrade-texlive-needspacecentos-upgrade-texlive-newfloatcentos-upgrade-texlive-newunicodecharcentos-upgrade-texlive-norasi-c90centos-upgrade-texlive-notoccitecentos-upgrade-texlive-ntgclasscentos-upgrade-texlive-oberdiekcentos-upgrade-texlive-obsoletecentos-upgrade-texlive-overpiccentos-upgrade-texlive-palatinocentos-upgrade-texlive-paralistcentos-upgrade-texlive-parallelcentos-upgrade-texlive-parskipcentos-upgrade-texlive-passivetexcentos-upgrade-texlive-pdfcolmkcentos-upgrade-texlive-pdfescapecentos-upgrade-texlive-pdflscapecentos-upgrade-texlive-pdfpagescentos-upgrade-texlive-pdftexcentos-upgrade-texlive-pdftex-debuginfocentos-upgrade-texlive-pdftexcmdscentos-upgrade-texlive-pgfcentos-upgrade-texlive-philokaliacentos-upgrade-texlive-placeinscentos-upgrade-texlive-plaincentos-upgrade-texlive-polyglossiacentos-upgrade-texlive-powerdotcentos-upgrade-texlive-preprintcentos-upgrade-texlive-psfragcentos-upgrade-texlive-pslatexcentos-upgrade-texlive-psnfsscentos-upgrade-texlive-pspicturecentos-upgrade-texlive-pst-3dcentos-upgrade-texlive-pst-arrowcentos-upgrade-texlive-pst-blurcentos-upgrade-texlive-pst-coilcentos-upgrade-texlive-pst-epscentos-upgrade-texlive-pst-fillcentos-upgrade-texlive-pst-gradcentos-upgrade-texlive-pst-mathcentos-upgrade-texlive-pst-nodecentos-upgrade-texlive-pst-plotcentos-upgrade-texlive-pst-slpecentos-upgrade-texlive-pst-textcentos-upgrade-texlive-pst-toolscentos-upgrade-texlive-pst-treecentos-upgrade-texlive-pstrickscentos-upgrade-texlive-pstricks-addcentos-upgrade-texlive-ptextcentos-upgrade-texlive-pxfontscentos-upgrade-texlive-qstestcentos-upgrade-texlive-ragged2ecentos-upgrade-texlive-rcscentos-upgrade-texlive-realscriptscentos-upgrade-texlive-refcountcentos-upgrade-texlive-rerunfilecheckcentos-upgrade-texlive-rsfscentos-upgrade-texlive-sansmathcentos-upgrade-texlive-sansmathaccentcentos-upgrade-texlive-sauerjcentos-upgrade-texlive-scheme-basiccentos-upgrade-texlive-sectioncentos-upgrade-texlive-sectstycentos-upgrade-texlive-seminarcentos-upgrade-texlive-sepnumcentos-upgrade-texlive-setspacecentos-upgrade-texlive-showexplcentos-upgrade-texlive-soulcentos-upgrade-texlive-stackenginecentos-upgrade-texlive-stmaryrdcentos-upgrade-texlive-stringenccentos-upgrade-texlive-subfigcentos-upgrade-texlive-subfigurecentos-upgrade-texlive-svn-provcentos-upgrade-texlive-symbolcentos-upgrade-texlive-t2centos-upgrade-texlive-tabucentos-upgrade-texlive-tabularycentos-upgrade-texlive-tetexcentos-upgrade-texlive-texcentos-upgrade-texlive-tex-debuginfocentos-upgrade-texlive-tex-gyrecentos-upgrade-texlive-tex-gyre-mathcentos-upgrade-texlive-tex-ini-filescentos-upgrade-texlive-tex4htcentos-upgrade-texlive-tex4ht-debuginfocentos-upgrade-texlive-texconfigcentos-upgrade-texlive-texlive-common-doccentos-upgrade-texlive-texlive-docindexcentos-upgrade-texlive-texlive-encentos-upgrade-texlive-texlive-infracentos-upgrade-texlive-texlive-msg-translationscentos-upgrade-texlive-texlive-scriptscentos-upgrade-texlive-texlive-scripts-extracentos-upgrade-texlive-textcasecentos-upgrade-texlive-textposcentos-upgrade-texlive-threeparttablecentos-upgrade-texlive-thumbpdfcentos-upgrade-texlive-timescentos-upgrade-texlive-tipacentos-upgrade-texlive-titleseccentos-upgrade-texlive-titlingcentos-upgrade-texlive-tocloftcentos-upgrade-texlive-toolscentos-upgrade-texlive-translatorcentos-upgrade-texlive-trimspacescentos-upgrade-texlive-txfontscentos-upgrade-texlive-type1cmcentos-upgrade-texlive-typehtmlcentos-upgrade-texlive-ucharcatcentos-upgrade-texlive-ucharclassescentos-upgrade-texlive-ucscentos-upgrade-texlive-uhccentos-upgrade-texlive-ulemcentos-upgrade-texlive-underscorecentos-upgrade-texlive-unicode-datacentos-upgrade-texlive-unicode-mathcentos-upgrade-texlive-uniquecountercentos-upgrade-texlive-unisugarcentos-upgrade-texlive-updmap-mapcentos-upgrade-texlive-upquotecentos-upgrade-texlive-urlcentos-upgrade-texlive-utopiacentos-upgrade-texlive-varwidthcentos-upgrade-texlive-wadalabcentos-upgrade-texlive-wascentos-upgrade-texlive-wasycentos-upgrade-texlive-wasy-type1centos-upgrade-texlive-wasy2-pscentos-upgrade-texlive-wasysymcentos-upgrade-texlive-wrapfigcentos-upgrade-texlive-xcolorcentos-upgrade-texlive-xdvicentos-upgrade-texlive-xdvi-debuginfocentos-upgrade-texlive-xecjkcentos-upgrade-texlive-xecolorcentos-upgrade-texlive-xecyrcentos-upgrade-texlive-xeindexcentos-upgrade-texlive-xepersiancentos-upgrade-texlive-xesearchcentos-upgrade-texlive-xetexcentos-upgrade-texlive-xetex-debuginfocentos-upgrade-texlive-xetex-itranscentos-upgrade-texlive-xetex-pstrickscentos-upgrade-texlive-xetex-tibetancentos-upgrade-texlive-xetexconfigcentos-upgrade-texlive-xetexfontinfocentos-upgrade-texlive-xifthencentos-upgrade-texlive-xkeyvalcentos-upgrade-texlive-xltxtracentos-upgrade-texlive-xmltexcentos-upgrade-texlive-xmltexconfigcentos-upgrade-texlive-xstringcentos-upgrade-texlive-xtabcentos-upgrade-texlive-xunicodecentos-upgrade-texlive-zapfchancentos-upgrade-texlive-zapfdingcentos-upgrade-texlive-zref
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.