mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | AR8035 |