id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
8619	Remove mpost from texlive shell_escape_commands	ken@…	ken@…	"From the tldist mailing list:
{{{
For all distro and other maintainers of TeX: mpost should be removed
from the list of shell_escape_commands in TeX Live's texmf.cnf, or
analogous lists in other setups. (Perhaps we will be able to reinstate
it in the 2017 TL release.)

}}}
(details of an exploit can be found on the web)"	defect	closed	highest	8.0	BOOK	SVN	medium	fixed