TeXlive 2023 vulnerability

[tlaronde%polynum.com@localhost]

FYI (if it has not already spread):

https://www.cve.org/CVERecord?id=CVE-2023-32700

this affects luatex. See also:

https://tug.org/~mseven/luatex.html

(FWIW, once the vulnerability was discovered, these were informed:

May 13, 2023
    I privately emailed the vulnerability details to the security
contacts for Ubuntu, Debian, Arch, Gentoo, Fedora, RHEL, OpenSUSE/SLES,
FreeBSD, OpenBSD, texlive.net, and Overleaf. 
    texlive.net is patched. 

And NetBSD and pkgsrc were not amongst them.)
-- 
        Thierry Laronde <tlaronde +AT+ polynum +dot+ com>
                     http://www.kergis.com/
                    http://kertex.kergis.com/
Key fingerprint = 0FF7 E906 FBAF FE95 FD89  250D 52B1 AE95 6006 F40C