CVE-2015-5701

Name of the Vulnerable Software and Affected Versions mktexlsr versions as packaged in texlive before revision 36626 and after revision 36855

Description The issue allows local users to write to arbitrary files via a symlink attack. This problem exists due to the reversion of a previous fix.

Recommendations For versions as packaged in texlive before revision 36626 and after revision 36855, update to a version that includes the fix for this issue to prevent local users from writing to arbitrary files via a symlink attack.