Opened 8 years ago

Closed 8 years ago

Last modified 8 years ago

#8619 closed defect (fixed)

Remove mpost from texlive shell_escape_commands

Reported by: ken@… Owned by: ken@…
Priority: highest Milestone: 8.0
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

From the tldist mailing list: 

For all distro and other maintainers of TeX: mpost should be removed
from the list of shell_escape_commands in TeX Live's texmf.cnf, or
analogous lists in other setups. (Perhaps we will be able to reinstate
it in the 2017 TL release.)

(details of an exploit can be found on the web)

Change History (2)

comment:1 by ken@…, 8 years ago

Resolution: → fixed
Status: new → closed

Fixed in r18044.

comment:2 by bdubbs@…, 8 years ago

Milestone: 7.11 → 8.0

Milestone renamed

Note: See TracTickets for help on using tickets.