openSUSE Leap 15.5 SUSE-SU-2023:2284-2 Critical: Arbitrary Code Execution
opensuse
July 20, 2023
This update for texlive fixes the following issues: CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389).
Description
This update for texlive fixes the following issues:
* CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389).
Patch
## Patch Instructions:
To install this SUSE Important update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.5
zypper in -t patch openSUSE-SLE-15.5-2023-2284=1
Package List
* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
* texlive-de-macro-bin-2021.20210325.svn17399-150400.31.3.1
* texlive-pfarrei-bin-2021.20210325.svn29348-150400.31.3.1
* texlive-latex-bin-bin-2021.20210325.svn54358-150400.31.3.1
* texlive-chktex-bin-2021.20210325.svn57878-150400.31.3.1
* texlive-context-bin-2021.20210325.svn34112-150400.31.3.1
* texlive-ctanupload-bin-2021.20210325.svn23866-150400.31.3.1
* texlive-xpdfopen-bin-2021.20210325.svn52917-150400.31.3.1
* texlive-musixtnt-bin-debuginfo-2021.20210325.svn50281-150400.31.3.1
* texlive-makeindex-bin-2021.20210325.svn57878-150400.31.3.1
* texlive-bibtex8-bin-debuginfo-2021.20210325.svn57878-150400.31.3.1
* texlive-pdflatexpicscale-bin-2021.20210325.svn41779-150400.31.3.1
* texlive-texloganalyser-bin-2021.20210325.svn13663-150400.31.3.1
* texlive-lacheck-bin-debuginfo-2021.20210325.svn53999-150400.31.3.1
* texlive-asymptote-bin-2021.20210325.svn57890-150400.31.3.1
* texlive-texplate-bin-2021.20210325.svn53444-150400.31.3.1
*...
Read the Full AdvisoryReferences
* #1211389
## References:
* https://www.suse.com/security/cve/CVE-2023-32700.html
* https://bugzilla.suse.com/show_bug.cgi?id=1211389
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2023:2284-2
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!