RSSAmplifier

Blog

Max Chernoff's posts

maxchernoff.caRSS feed ↗3 posts

Latest posts

Overleaf Instance

An introduction to the Overleaf instance hosted on maxchernoff.ca.

Server Installation

A list of commands summarizing how I set up the server for this website.

LuaTeX Security Vulnerabilities

Any document compiled with older versions of LuaTeX can execute arbitrary shell commands, even with shell escape disabled. This affects LuaTeX versions 1.04–1.16.1, which were included in TeX Live 2017–2022 as well as the original release of TeX Live 2023. This issue was fixed in LuaTeX 1.17.0, and is distributed as an update to TeX Live 2023.