[tex-live] Update texlive-bin or not?

Bob bobabc at bellsouth.net
Fri Oct 12 12:22:11 CEST 2018


A few months ago I installed TeX Live 2018 following the instructions at

https://tug.org/texlive/

I did not use the package manager on linux mint.

Linux mint is now recommending that I update texlive-bin.  I find this 
surprising since I did not use the package manager to install texlive; 
furthermore, the package manager says that texlive-bin is not installed.

Should I install the update or ignore it?

More information about my version of texlive and the changelog for the 
update are given below.

--Bob

=================
pdfTeX 3.14159265-2.6-1.40.19 (TeX Live 2018)
kpathsea version 6.3.0
Copyright 2018 Han The Thanh (pdfTeX) et al.
There is NO warranty.  Redistribution of this software is
covered by the terms of both the pdfTeX copyright and
the Lesser GNU General Public License.
For more information about these matters, see the file
named COPYING and the pdfTeX source.
Primary author of pdfTeX: Han The Thanh (pdfTeX) et al.
Compiled with libpng 1.6.34; using libpng 1.6.34
Compiled with zlib 1.2.11; using zlib 1.2.11
Compiled with xpdf version 4.00
=============



==============
texlive-bin (2013.20130729.30972-2ubuntu0.1) trusty-security; urgency=medium

   * SECURITY UPDATE: Symlink attack
     - debian/patches/CVE-2015-5700.patch: fix in
       texk/kpathsea/mktexlsr.
     - CVE-2015-5700
   * SECURITY UPDATE: Arbitrary code execution
     - debian/patches/CVE-2018-17407.patch: fix in
       texk/dvipsk/writet1.c, texk/web2c/luatexdir/font/writet1.w,
       texk/web2c/pdftexdir/writet1.c.
     - CVE-2018-17407

  -- Leonidas S. Barbosa <leo.barbosa at canonical.com>  Tue, 09 Oct 2018 
13:50:26 -0300
================




More information about the tex-live mailing list