CVE-2015-5700: Tug Texlive

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.

Affected products

• Tug Texlive: version 20100722 only; version 20110705 only; version 20120701 only; version 20130530 only; version 20140525 only

Published 2017-08-25. Last modified 2026-06-17.