Texlive

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:tug:texlive:20140525:*:*:*:*:*:*:*

part: a version: 20140525 update: *

VendorTug (99fcb8ed-7ef7-59af-a8dd-a3f02f7d9b08)
ProductTexlive (20d7d925-18a1-5c21-9b90-e7edaa576370)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/texlive purl2cpe 2026-06-01 10:18:17.491217
pkg:deb/ubuntu/texlive purl2cpe 2026-06-01 10:18:17.491219
pkg:github/tex-live/texlive-source purl2cpe 2026-06-01 10:18:17.491220
pkg:github/texlive/texlive-source purl2cpe 2026-06-01 10:18:17.491221
pkg:gitlab/redhat/texlive purl2cpe 2026-06-01 10:18:17.491223
pkg:rpm/centos/texlive purl2cpe 2026-06-01 10:18:17.491224
pkg:rpm/fedora/texlive purl2cpe 2026-06-01 10:18:17.491226
pkg:rpm/opensuse/texlive purl2cpe 2026-06-01 10:18:17.491227

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5701 vulnerable 2026-06-08 05:06:50.768516 Details available
mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T06:59:04.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5700 vulnerable 2026-06-08 05:06:50.767826 Details available
mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T06:59:03.779Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.