[tex-live] TL-2009 + Win/XP + Rsync + CACLS : Success :-)
cherepan at mccme.ru
Fri Oct 9 23:21:12 CEST 2009
On Fri, 09 Oct 2009 20:58:29 +0200, Manuel Pégourié-Gonnard <mpg at elzevir.fr> wrote:
> I agree that it would be desirable that xzdec doesn't crash even on badly
> corrupted files and it should exit gracefully with a nice error message, but I
> think it is a minor point if it works OK with non-corrupted files.
Then you need to ensure that users will not extract xzdec from texlive
and use it separately to process files from untrusted sources. Or they
will risk to get compromised (not very probable but nevertheless).
BTW what about digitally signing texlive distribution?
More information about the tex-live