Approved changes feed: RSS · Atom

cpe:2.3:a:tug:tex_live:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorTug (99fcb8ed-7ef7-59af-a8dd-a3f02f7d9b08)
ProductTex Live (026c2707-3270-5270-8424-8ebedc1b4ff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/texlive purl2cpe 2026-06-01 10:18:17.437398
pkg:deb/ubuntu/texlive purl2cpe 2026-06-01 10:18:17.437400
pkg:github/tex-live/texlive-source purl2cpe 2026-06-01 10:18:17.437403
pkg:github/texlive/texlive-source purl2cpe 2026-06-01 10:18:17.437406
pkg:gitlab/redhat/texlive purl2cpe 2026-06-01 10:18:17.437409
pkg:rpm/centos/texlive purl2cpe 2026-06-01 10:18:17.437411
pkg:rpm/fedora/texlive purl2cpe 2026-06-01 10:18:17.437414
pkg:rpm/opensuse/texlive purl2cpe 2026-06-01 10:18:17.437417

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10243 vulnerable 2026-06-08 05:07:17.620621 Details available
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
Published: 2017-05-02T14:00:00.000Z
Updated: 2024-08-06T03:14:42.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.