RSSAmplifier

Max Chernoff's posts · May 20, 2023

LuaTeX Security Vulnerabilities

0
Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Any document compiled with older versions of LuaTeX can execute arbitrary shell commands, even with shell escape disabled. This affects LuaTeX versions 1.04–1.16.1, which were included in TeX Live 2017–2022 as well as the original release of TeX Live 2023. This issue was fixed in LuaTeX 1.17.0, and is distributed as an update to TeX Live 2023.

Read on maxchernoff.ca

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.