It is worth remembering that the described tampered web font scenario doesn't normally apply to XeTeX use scenarios. Den 19 feb 2016 06:26 skrev "maxwell" <maxw...@umiacs.umd.edu>:
> There is a vulnerability in the Graphite library: > > http://news.softpedia.com/news/vulnerability-in-font-processing-library-affects-linux-openoffice-firefox-500027.shtml > Reportedly the problems have been patched in version 1.3.5 of Graphite2. > But the version of xetex I'm using (3.14159265-2.6-0.99992, from the TeX > Live 2015 distro) says it uses Graphite2 v1.2.3. Will the next TeX Live > distro's version of xetex use >= v.1.3.5? > -- > Mike Maxwell > maxw...@umiacs.umd.edu > "I cannot believe that our existence in this universe > is a mere quirk of fate, an accident of history, an > incidental blip in the great cosmic drama. Our > involvement is too intimate. The physical species > Homo may count for nothing, but the existence of > mind in some organism on some planet in the universe > is surely a fact of fundamental significance. Through > conscious beings the universe has generated > self-awareness." --Paul Davies > > > -------------------------------------------------- > Subscriptions, Archive, and List information, etc.: > http://tug.org/mailman/listinfo/xetex >
-------------------------------------------------- Subscriptions, Archive, and List information, etc.: http://tug.org/mailman/listinfo/xetex
