Rapid7 Vulnerability & Exploit Database

Oracle Linux: (CVE-2023-32700) ELSA-2023-3661: texlive security update

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Oracle Linux: (CVE-2023-32700) ELSA-2023-3661: texlive security update

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
05/20/2023
Created
06/23/2023
Added
06/21/2023
Modified
06/21/2023

Description

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

Solution(s)

  • oracle-linux-upgrade-texlive
  • oracle-linux-upgrade-texlive-adjustbox
  • oracle-linux-upgrade-texlive-ae
  • oracle-linux-upgrade-texlive-algorithms
  • oracle-linux-upgrade-texlive-alphalph
  • oracle-linux-upgrade-texlive-amscls
  • oracle-linux-upgrade-texlive-amsfonts
  • oracle-linux-upgrade-texlive-amsmath
  • oracle-linux-upgrade-texlive-anyfontsize
  • oracle-linux-upgrade-texlive-anysize
  • oracle-linux-upgrade-texlive-appendix
  • oracle-linux-upgrade-texlive-arabxetex
  • oracle-linux-upgrade-texlive-arphic
  • oracle-linux-upgrade-texlive-atbegshi
  • oracle-linux-upgrade-texlive-attachfile
  • oracle-linux-upgrade-texlive-attachfile2
  • oracle-linux-upgrade-texlive-atveryend
  • oracle-linux-upgrade-texlive-auxhook
  • oracle-linux-upgrade-texlive-avantgar
  • oracle-linux-upgrade-texlive-awesomebox
  • oracle-linux-upgrade-texlive-babel
  • oracle-linux-upgrade-texlive-babel-english
  • oracle-linux-upgrade-texlive-babelbib
  • oracle-linux-upgrade-texlive-base
  • oracle-linux-upgrade-texlive-beamer
  • oracle-linux-upgrade-texlive-bera
  • oracle-linux-upgrade-texlive-beton
  • oracle-linux-upgrade-texlive-bibtex
  • oracle-linux-upgrade-texlive-bibtopic
  • oracle-linux-upgrade-texlive-bidi
  • oracle-linux-upgrade-texlive-bigfoot
  • oracle-linux-upgrade-texlive-bigintcalc
  • oracle-linux-upgrade-texlive-bitset
  • oracle-linux-upgrade-texlive-bookman
  • oracle-linux-upgrade-texlive-bookmark
  • oracle-linux-upgrade-texlive-booktabs
  • oracle-linux-upgrade-texlive-breakurl
  • oracle-linux-upgrade-texlive-breqn
  • oracle-linux-upgrade-texlive-capt-of
  • oracle-linux-upgrade-texlive-caption
  • oracle-linux-upgrade-texlive-carlisle
  • oracle-linux-upgrade-texlive-catchfile
  • oracle-linux-upgrade-texlive-changebar
  • oracle-linux-upgrade-texlive-changepage
  • oracle-linux-upgrade-texlive-charter
  • oracle-linux-upgrade-texlive-chngcntr
  • oracle-linux-upgrade-texlive-cite
  • oracle-linux-upgrade-texlive-cjk
  • oracle-linux-upgrade-texlive-classpack
  • oracle-linux-upgrade-texlive-cm
  • oracle-linux-upgrade-texlive-cm-lgc
  • oracle-linux-upgrade-texlive-cm-super
  • oracle-linux-upgrade-texlive-cmap
  • oracle-linux-upgrade-texlive-cmextra
  • oracle-linux-upgrade-texlive-cns
  • oracle-linux-upgrade-texlive-collectbox
  • oracle-linux-upgrade-texlive-collection-basic
  • oracle-linux-upgrade-texlive-collection-fontsrecommended
  • oracle-linux-upgrade-texlive-collection-htmlxml
  • oracle-linux-upgrade-texlive-collection-latex
  • oracle-linux-upgrade-texlive-collection-latexrecommended
  • oracle-linux-upgrade-texlive-collection-xetex
  • oracle-linux-upgrade-texlive-colorprofiles
  • oracle-linux-upgrade-texlive-colortbl
  • oracle-linux-upgrade-texlive-context
  • oracle-linux-upgrade-texlive-courier
  • oracle-linux-upgrade-texlive-crop
  • oracle-linux-upgrade-texlive-csquotes
  • oracle-linux-upgrade-texlive-ctable
  • oracle-linux-upgrade-texlive-ctablestack
  • oracle-linux-upgrade-texlive-currfile
  • oracle-linux-upgrade-texlive-datetime
  • oracle-linux-upgrade-texlive-dehyph
  • oracle-linux-upgrade-texlive-dvipdfmx
  • oracle-linux-upgrade-texlive-dvipng
  • oracle-linux-upgrade-texlive-dvips
  • oracle-linux-upgrade-texlive-dvisvgm
  • oracle-linux-upgrade-texlive-ec
  • oracle-linux-upgrade-texlive-eepic
  • oracle-linux-upgrade-texlive-enctex
  • oracle-linux-upgrade-texlive-enumitem
  • oracle-linux-upgrade-texlive-environ
  • oracle-linux-upgrade-texlive-epsf
  • oracle-linux-upgrade-texlive-epstopdf
  • oracle-linux-upgrade-texlive-epstopdf-pkg
  • oracle-linux-upgrade-texlive-eqparbox
  • oracle-linux-upgrade-texlive-eso-pic
  • oracle-linux-upgrade-texlive-etex
  • oracle-linux-upgrade-texlive-etex-pkg
  • oracle-linux-upgrade-texlive-etexcmds
  • oracle-linux-upgrade-texlive-etoc
  • oracle-linux-upgrade-texlive-etoolbox
  • oracle-linux-upgrade-texlive-euenc
  • oracle-linux-upgrade-texlive-euler
  • oracle-linux-upgrade-texlive-euro
  • oracle-linux-upgrade-texlive-eurosym
  • oracle-linux-upgrade-texlive-extsizes
  • oracle-linux-upgrade-texlive-fancybox
  • oracle-linux-upgrade-texlive-fancyhdr
  • oracle-linux-upgrade-texlive-fancyref
  • oracle-linux-upgrade-texlive-fancyvrb
  • oracle-linux-upgrade-texlive-filecontents
  • oracle-linux-upgrade-texlive-filehook
  • oracle-linux-upgrade-texlive-finstrut
  • oracle-linux-upgrade-texlive-fix2col
  • oracle-linux-upgrade-texlive-fixlatvian
  • oracle-linux-upgrade-texlive-float
  • oracle-linux-upgrade-texlive-fmtcount
  • oracle-linux-upgrade-texlive-fncychap
  • oracle-linux-upgrade-texlive-fontawesome
  • oracle-linux-upgrade-texlive-fontbook
  • oracle-linux-upgrade-texlive-fonts-tlwg
  • oracle-linux-upgrade-texlive-fontspec
  • oracle-linux-upgrade-texlive-fontware
  • oracle-linux-upgrade-texlive-fontwrap
  • oracle-linux-upgrade-texlive-footmisc
  • oracle-linux-upgrade-texlive-footnotehyper
  • oracle-linux-upgrade-texlive-fp
  • oracle-linux-upgrade-texlive-fpl
  • oracle-linux-upgrade-texlive-framed
  • oracle-linux-upgrade-texlive-garuda-c90
  • oracle-linux-upgrade-texlive-geometry
  • oracle-linux-upgrade-texlive-gettitlestring
  • oracle-linux-upgrade-texlive-glyphlist
  • oracle-linux-upgrade-texlive-gnu-freefont
  • oracle-linux-upgrade-texlive-graphics
  • oracle-linux-upgrade-texlive-graphics-cfg
  • oracle-linux-upgrade-texlive-graphics-def
  • oracle-linux-upgrade-texlive-grfext
  • oracle-linux-upgrade-texlive-grffile
  • oracle-linux-upgrade-texlive-gsftopk
  • oracle-linux-upgrade-texlive-hanging
  • oracle-linux-upgrade-texlive-helvetic
  • oracle-linux-upgrade-texlive-hobsub
  • oracle-linux-upgrade-texlive-hologo
  • oracle-linux-upgrade-texlive-hycolor
  • oracle-linux-upgrade-texlive-hyperref
  • oracle-linux-upgrade-texlive-hyph-utf8
  • oracle-linux-upgrade-texlive-hyphen-base
  • oracle-linux-upgrade-texlive-hyphenat
  • oracle-linux-upgrade-texlive-hyphenex
  • oracle-linux-upgrade-texlive-ifetex
  • oracle-linux-upgrade-texlive-ifluatex
  • oracle-linux-upgrade-texlive-ifmtarg
  • oracle-linux-upgrade-texlive-ifoddpage
  • oracle-linux-upgrade-texlive-ifplatform
  • oracle-linux-upgrade-texlive-iftex
  • oracle-linux-upgrade-texlive-ifxetex
  • oracle-linux-upgrade-texlive-import
  • oracle-linux-upgrade-texlive-index
  • oracle-linux-upgrade-texlive-infwarerr
  • oracle-linux-upgrade-texlive-intcalc
  • oracle-linux-upgrade-texlive-jadetex
  • oracle-linux-upgrade-texlive-jknapltx
  • oracle-linux-upgrade-texlive-kastrup
  • oracle-linux-upgrade-texlive-kerkis
  • oracle-linux-upgrade-texlive-knuth-lib
  • oracle-linux-upgrade-texlive-knuth-local
  • oracle-linux-upgrade-texlive-koma-script
  • oracle-linux-upgrade-texlive-kpathsea
  • oracle-linux-upgrade-texlive-kvdefinekeys
  • oracle-linux-upgrade-texlive-kvoptions
  • oracle-linux-upgrade-texlive-kvsetkeys
  • oracle-linux-upgrade-texlive-l3backend
  • oracle-linux-upgrade-texlive-l3experimental
  • oracle-linux-upgrade-texlive-l3kernel
  • oracle-linux-upgrade-texlive-l3packages
  • oracle-linux-upgrade-texlive-lastpage
  • oracle-linux-upgrade-texlive-latex
  • oracle-linux-upgrade-texlive-latex-fonts
  • oracle-linux-upgrade-texlive-latex2man
  • oracle-linux-upgrade-texlive-latexbug
  • oracle-linux-upgrade-texlive-latexconfig
  • oracle-linux-upgrade-texlive-letltxmacro
  • oracle-linux-upgrade-texlive-lettrine
  • oracle-linux-upgrade-texlive-lib
  • oracle-linux-upgrade-texlive-lib-devel
  • oracle-linux-upgrade-texlive-linegoal
  • oracle-linux-upgrade-texlive-lineno
  • oracle-linux-upgrade-texlive-listings
  • oracle-linux-upgrade-texlive-listofitems
  • oracle-linux-upgrade-texlive-lm
  • oracle-linux-upgrade-texlive-lm-math
  • oracle-linux-upgrade-texlive-ltabptch
  • oracle-linux-upgrade-texlive-ltxcmds
  • oracle-linux-upgrade-texlive-ltxmisc
  • oracle-linux-upgrade-texlive-lua-alt-getopt
  • oracle-linux-upgrade-texlive-luahbtex
  • oracle-linux-upgrade-texlive-lualatex-math
  • oracle-linux-upgrade-texlive-lualibs
  • oracle-linux-upgrade-texlive-luaotfload
  • oracle-linux-upgrade-texlive-luatex
  • oracle-linux-upgrade-texlive-luatex85
  • oracle-linux-upgrade-texlive-luatexbase
  • oracle-linux-upgrade-texlive-lwarp
  • oracle-linux-upgrade-texlive-makecmds
  • oracle-linux-upgrade-texlive-makeindex
  • oracle-linux-upgrade-texlive-manfnt-font
  • oracle-linux-upgrade-texlive-marginnote
  • oracle-linux-upgrade-texlive-marvosym
  • oracle-linux-upgrade-texlive-mathpazo
  • oracle-linux-upgrade-texlive-mathspec
  • oracle-linux-upgrade-texlive-mathtools
  • oracle-linux-upgrade-texlive-mdwtools
  • oracle-linux-upgrade-texlive-memoir
  • oracle-linux-upgrade-texlive-metafont
  • oracle-linux-upgrade-texlive-metalogo
  • oracle-linux-upgrade-texlive-metapost
  • oracle-linux-upgrade-texlive-mflogo
  • oracle-linux-upgrade-texlive-mflogo-font
  • oracle-linux-upgrade-texlive-mfnfss
  • oracle-linux-upgrade-texlive-mfware
  • oracle-linux-upgrade-texlive-microtype
  • oracle-linux-upgrade-texlive-minitoc
  • oracle-linux-upgrade-texlive-mnsymbol
  • oracle-linux-upgrade-texlive-modes
  • oracle-linux-upgrade-texlive-mparhack
  • oracle-linux-upgrade-texlive-mptopdf
  • oracle-linux-upgrade-texlive-ms
  • oracle-linux-upgrade-texlive-multido
  • oracle-linux-upgrade-texlive-multirow
  • oracle-linux-upgrade-texlive-natbib
  • oracle-linux-upgrade-texlive-ncctools
  • oracle-linux-upgrade-texlive-ncntrsbk
  • oracle-linux-upgrade-texlive-needspace
  • oracle-linux-upgrade-texlive-newfloat
  • oracle-linux-upgrade-texlive-newunicodechar
  • oracle-linux-upgrade-texlive-norasi-c90
  • oracle-linux-upgrade-texlive-notoccite
  • oracle-linux-upgrade-texlive-ntgclass
  • oracle-linux-upgrade-texlive-oberdiek
  • oracle-linux-upgrade-texlive-obsolete
  • oracle-linux-upgrade-texlive-overpic
  • oracle-linux-upgrade-texlive-palatino
  • oracle-linux-upgrade-texlive-paralist
  • oracle-linux-upgrade-texlive-parallel
  • oracle-linux-upgrade-texlive-parskip
  • oracle-linux-upgrade-texlive-passivetex
  • oracle-linux-upgrade-texlive-pdfcolmk
  • oracle-linux-upgrade-texlive-pdfescape
  • oracle-linux-upgrade-texlive-pdflscape
  • oracle-linux-upgrade-texlive-pdfpages
  • oracle-linux-upgrade-texlive-pdftex
  • oracle-linux-upgrade-texlive-pdftexcmds
  • oracle-linux-upgrade-texlive-pgf
  • oracle-linux-upgrade-texlive-philokalia
  • oracle-linux-upgrade-texlive-placeins
  • oracle-linux-upgrade-texlive-plain
  • oracle-linux-upgrade-texlive-polyglossia
  • oracle-linux-upgrade-texlive-powerdot
  • oracle-linux-upgrade-texlive-preprint
  • oracle-linux-upgrade-texlive-psfrag
  • oracle-linux-upgrade-texlive-pslatex
  • oracle-linux-upgrade-texlive-psnfss
  • oracle-linux-upgrade-texlive-pspicture
  • oracle-linux-upgrade-texlive-pst
  • oracle-linux-upgrade-texlive-pst-arrow
  • oracle-linux-upgrade-texlive-pst-blur
  • oracle-linux-upgrade-texlive-pst-coil
  • oracle-linux-upgrade-texlive-pst-eps
  • oracle-linux-upgrade-texlive-pst-fill
  • oracle-linux-upgrade-texlive-pst-grad
  • oracle-linux-upgrade-texlive-pst-math
  • oracle-linux-upgrade-texlive-pst-node
  • oracle-linux-upgrade-texlive-pst-plot
  • oracle-linux-upgrade-texlive-pst-slpe
  • oracle-linux-upgrade-texlive-pst-text
  • oracle-linux-upgrade-texlive-pst-tools
  • oracle-linux-upgrade-texlive-pst-tree
  • oracle-linux-upgrade-texlive-pstricks
  • oracle-linux-upgrade-texlive-pstricks-add
  • oracle-linux-upgrade-texlive-ptext
  • oracle-linux-upgrade-texlive-pxfonts
  • oracle-linux-upgrade-texlive-qstest
  • oracle-linux-upgrade-texlive-ragged2e
  • oracle-linux-upgrade-texlive-rcs
  • oracle-linux-upgrade-texlive-realscripts
  • oracle-linux-upgrade-texlive-refcount
  • oracle-linux-upgrade-texlive-rerunfilecheck
  • oracle-linux-upgrade-texlive-rsfs
  • oracle-linux-upgrade-texlive-sansmath
  • oracle-linux-upgrade-texlive-sansmathaccent
  • oracle-linux-upgrade-texlive-sauerj
  • oracle-linux-upgrade-texlive-scheme-basic
  • oracle-linux-upgrade-texlive-section
  • oracle-linux-upgrade-texlive-sectsty
  • oracle-linux-upgrade-texlive-seminar
  • oracle-linux-upgrade-texlive-sepnum
  • oracle-linux-upgrade-texlive-setspace
  • oracle-linux-upgrade-texlive-showexpl
  • oracle-linux-upgrade-texlive-soul
  • oracle-linux-upgrade-texlive-stackengine
  • oracle-linux-upgrade-texlive-stmaryrd
  • oracle-linux-upgrade-texlive-stringenc
  • oracle-linux-upgrade-texlive-subfig
  • oracle-linux-upgrade-texlive-subfigure
  • oracle-linux-upgrade-texlive-svn-prov
  • oracle-linux-upgrade-texlive-symbol
  • oracle-linux-upgrade-texlive-t2
  • oracle-linux-upgrade-texlive-tabu
  • oracle-linux-upgrade-texlive-tabulary
  • oracle-linux-upgrade-texlive-tetex
  • oracle-linux-upgrade-texlive-tex
  • oracle-linux-upgrade-texlive-tex-gyre
  • oracle-linux-upgrade-texlive-tex-gyre-math
  • oracle-linux-upgrade-texlive-tex-ini-files
  • oracle-linux-upgrade-texlive-tex4ht
  • oracle-linux-upgrade-texlive-texconfig
  • oracle-linux-upgrade-texlive-texlive-common-doc
  • oracle-linux-upgrade-texlive-texlive-docindex
  • oracle-linux-upgrade-texlive-texlive-en
  • oracle-linux-upgrade-texlive-texlive-infra
  • oracle-linux-upgrade-texlive-texlive-msg-translations
  • oracle-linux-upgrade-texlive-texlive-scripts
  • oracle-linux-upgrade-texlive-texlive-scripts-extra
  • oracle-linux-upgrade-texlive-textcase
  • oracle-linux-upgrade-texlive-textpos
  • oracle-linux-upgrade-texlive-threeparttable
  • oracle-linux-upgrade-texlive-thumbpdf
  • oracle-linux-upgrade-texlive-times
  • oracle-linux-upgrade-texlive-tipa
  • oracle-linux-upgrade-texlive-titlesec
  • oracle-linux-upgrade-texlive-titling
  • oracle-linux-upgrade-texlive-tocloft
  • oracle-linux-upgrade-texlive-tools
  • oracle-linux-upgrade-texlive-translator
  • oracle-linux-upgrade-texlive-trimspaces
  • oracle-linux-upgrade-texlive-txfonts
  • oracle-linux-upgrade-texlive-type1cm
  • oracle-linux-upgrade-texlive-typehtml
  • oracle-linux-upgrade-texlive-ucharcat
  • oracle-linux-upgrade-texlive-ucharclasses
  • oracle-linux-upgrade-texlive-ucs
  • oracle-linux-upgrade-texlive-uhc
  • oracle-linux-upgrade-texlive-ulem
  • oracle-linux-upgrade-texlive-underscore
  • oracle-linux-upgrade-texlive-unicode-data
  • oracle-linux-upgrade-texlive-unicode-math
  • oracle-linux-upgrade-texlive-uniquecounter
  • oracle-linux-upgrade-texlive-unisugar
  • oracle-linux-upgrade-texlive-updmap-map
  • oracle-linux-upgrade-texlive-upquote
  • oracle-linux-upgrade-texlive-url
  • oracle-linux-upgrade-texlive-utopia
  • oracle-linux-upgrade-texlive-varwidth
  • oracle-linux-upgrade-texlive-wadalab
  • oracle-linux-upgrade-texlive-was
  • oracle-linux-upgrade-texlive-wasy
  • oracle-linux-upgrade-texlive-wasy-type1
  • oracle-linux-upgrade-texlive-wasy2-ps
  • oracle-linux-upgrade-texlive-wasysym
  • oracle-linux-upgrade-texlive-wrapfig
  • oracle-linux-upgrade-texlive-xcolor
  • oracle-linux-upgrade-texlive-xdvi
  • oracle-linux-upgrade-texlive-xecjk
  • oracle-linux-upgrade-texlive-xecolor
  • oracle-linux-upgrade-texlive-xecyr
  • oracle-linux-upgrade-texlive-xeindex
  • oracle-linux-upgrade-texlive-xepersian
  • oracle-linux-upgrade-texlive-xesearch
  • oracle-linux-upgrade-texlive-xetex
  • oracle-linux-upgrade-texlive-xetex-itrans
  • oracle-linux-upgrade-texlive-xetex-pstricks
  • oracle-linux-upgrade-texlive-xetex-tibetan
  • oracle-linux-upgrade-texlive-xetexconfig
  • oracle-linux-upgrade-texlive-xetexfontinfo
  • oracle-linux-upgrade-texlive-xifthen
  • oracle-linux-upgrade-texlive-xkeyval
  • oracle-linux-upgrade-texlive-xltxtra
  • oracle-linux-upgrade-texlive-xmltex
  • oracle-linux-upgrade-texlive-xmltexconfig
  • oracle-linux-upgrade-texlive-xstring
  • oracle-linux-upgrade-texlive-xtab
  • oracle-linux-upgrade-texlive-xunicode
  • oracle-linux-upgrade-texlive-zapfchan
  • oracle-linux-upgrade-texlive-zapfding
  • oracle-linux-upgrade-texlive-zref

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;