CVE-2016-10243
Fixed in a distro release EPSS 7%
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
Products: debian_linux, fedoraproject fedora, tug tex_live
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | texlive-base | 2016.20161130-1 |
| Debian 12 | texlive-bin | 2019.20190605.51237-2 |
| Debian 13 | texlive-base | 2016.20161130-1 |
| Debian 13 | texlive-bin | 2019.20190605.51237-2 |
| Debian 14 | texlive-base | 2016.20161130-1 |
| Debian 14 | texlive-bin | 2019.20190605.51237-2 |
| Debian 7 | texlive-base | 2012.20120611-5+deb7u1 |
| Debian 8 | texlive-base | 2014.20141024-2+deb8u1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | texlive-kastrup | 2013.84.svn15878-21.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | texlive-koma-script | 2013.84.3.11bsvn29774-21.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | texlive-kpathsea | 2013.84.svn30218-21.3.1 |
| Ubuntu 14.04 LTS | texlive-base | 2013.20140215-1ubuntu0.1 |
| Ubuntu 16.04 LTS | texlive-base | 2015.20160320-1ubuntu0.1 |
| openSUSE Tumbleweed | texlive | 2021.20210325.svn34398-76.3 |
| openSUSE Tumbleweed | texlive-specs-a | 2021.186.3.0_beta3svn33894-47.2 |
| openSUSE Tumbleweed | texlive-specs-b | 2021.186.svn19440-46.2 |
| openSUSE Tumbleweed | texlive-specs-c | 2021.186.svn15878-46.2 |
| openSUSE Tumbleweed | texlive-specs-d | 2021.186.2.1bsvn15878-45.2 |
| openSUSE Tumbleweed | texlive-specs-e | 2021.186.1.5svn55387-46.2 |
| openSUSE Tumbleweed | texlive-specs-f | 2021.186.1.5.7svn58590-46.2 |
| openSUSE Tumbleweed | texlive-specs-g | 2021.186.1.0svn54080-45.2 |
| openSUSE Tumbleweed | texlive-specs-h | 2021.186.1.0svn18115-46.3 |
| openSUSE Tumbleweed | texlive-specs-i | 2021.186.2.0bsvn56782-45.2 |
| openSUSE Tumbleweed | texlive-specs-j | 2021.186.1.6.0svn54732-45.2 |
| openSUSE Tumbleweed | texlive-specs-k | 2021.186.1.0fsvn22255-46.3 |
| openSUSE Tumbleweed | texlive-specs-l | 2021.186.1.2.2svn57773-45.2 |
| openSUSE Tumbleweed | texlive-specs-m | 2021.186.0.0.5.6svn53248-48.2 |
| openSUSE Tumbleweed | texlive-specs-n | 2021.187.svn55643-47.2 |
| openSUSE Tumbleweed | texlive-specs-o | 2021.186.1.5svn15878-45.2 |
| openSUSE Tumbleweed | texlive-specs-p | 2021.186.1.01svn41996-46.2 |
| openSUSE Tumbleweed | texlive-specs-q | 2021.186.0.0.1svn45601-47.3 |
| openSUSE Tumbleweed | texlive-specs-r | 2021.186.0.0.3.1svn55214-44.2 |
| openSUSE Tumbleweed | texlive-specs-s | 2021.186.0.0.3bsvn15878-45.2 |
| openSUSE Tumbleweed | texlive-specs-t | 2021.186.0.0.1svn15878-46.3 |
| openSUSE Tumbleweed | texlive-specs-u | 2021.186.1.2asvn15878-46.2 |
| openSUSE Tumbleweed | texlive-specs-v | 2021.186.0.0.1svn34495-50.3 |
| openSUSE Tumbleweed | texlive-specs-w | 2021.186.1.2svn54512-46.2 |
| openSUSE Tumbleweed | texlive-specs-x | 2021.186.1.3svn40772-45.2 |
| openSUSE Tumbleweed | texlive-specs-y | 2021.186.1.1svn48423-46.2 |
| openSUSE Tumbleweed | texlive-specs-z | 2021.186.17.7svn55862-45.3 |