[tex-live] TL-2009 + Win/XP + Rsync + CACLS : Success :-)

Alexander Cherepanov cherepan at mccme.ru
Fri Oct 9 23:21:12 CEST 2009


Hi Manuel!
On Fri, 09 Oct 2009 20:58:29 +0200, Manuel Pégourié-Gonnard <mpg at elzevir.fr> wrote:

> I agree that it would be desirable that xzdec doesn't crash even on badly
> corrupted files and it should exit gracefully with a nice error message, but I
> think it is a minor point if it works OK with non-corrupted files.

Then you need to ensure that users will not extract xzdec from texlive 
and use it separately to process files from untrusted sources. Or they 
will risk to get compromised (not very probable but nevertheless).

BTW what about digitally signing texlive distribution?

Alexander Cherepanov




More information about the tex-live mailing list