From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2 autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 14154 invoked from network); 2 Sep 2021 12:33:24 -0000 Received: from tb-ob0.topicbox.com (64.147.108.117) by inbox.vuxu.org with ESMTPUTF8; 2 Sep 2021 12:33:24 -0000 Received: from tb-mx1.topicbox.com (tb-mx1.nyi.icgroup.com [10.90.30.61]) by tb-ob0.topicbox.com (Postfix) with ESMTP id 9221235E28 for ; Thu, 2 Sep 2021 08:33:23 -0400 (EDT) (envelope-from bounce.mMa6e736d23d04583c6ededa8c.r522be890-2105-11eb-b15e-8d699134e1fa@9fans.bounce.topicbox.com) Received: by tb-mx1.topicbox.com (Postfix, from userid 1132) id 8D48449E8D79; Thu, 2 Sep 2021 08:33:23 -0400 (EDT) ARC-Authentication-Results: i=2; topicbox.com; arc=pass; dkim=invalid (public key: not available, 0-bit key sha256) header.d=polynum.com header.i=@polynum.com header.b=aULENzeF header.a=-sha256 header.s=202006 x-bits=0; dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=polynum.com; spf=pass smtp.mailfrom=thierry.laronde@sfr.fr smtp.helo=smtp26.services.sfr.fr; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (message has been altered)) (Message modified while forwarding at Topicbox) ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=date:from:to:subject:message-id:references :mime-version:content-type:content-transfer-encoding:in-reply-to :list-help:list-id:list-post:list-subscribe:reply-to :list-unsubscribe; s=sysmsg-1; t=1630586003; bh=kzOHzHuGVofuMvMs b9l9w6Of1cYys4i/BlN+tfMBdl8=; b=eZ8EO0dHyQQhN69a1RiVNj1T/PJZQXA+ dCkfhfQzzWtE12elJfgSel3tNYla5x/b1r2ZeVfshPxisWrDVys/bYDWgA6Jf9Fu veVHS33u7r832S9BK+RsBeQEiJ8vJFACQ1yLCui/1yKOKBXk1ug9ogrptDsY3J3s ObW1tLx4mo4= ARC-Seal: i=2; a=rsa-sha256; cv=pass; d=topicbox.com; s=sysmsg-1; t= 1630586003; b=lbT6frbcvKk6C7mAwvksa9lGx1HJooSHwzUzp1pcbVEtfhX4X6 c9gQZ62vuK1kgvOe46LK7RAg7+93NRJSu+QSK/iWgiV2H8Bejuf0PaYzS6c96zZM E8zKEfIjYsWOVQ9I3hWsm3P1mDZosgVcuMoftalTSDASE3UcgXRwCkGDY= Authentication-Results: topicbox.com; arc=pass; dkim=invalid (public key: not available, 0-bit key sha256) header.d=polynum.com header.i=@polynum.com header.b=aULENzeF header.a=-sha256 header.s=202006 x-bits=0; dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=polynum.com; spf=pass smtp.mailfrom=thierry.laronde@sfr.fr smtp.helo=smtp26.services.sfr.fr; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (message has been altered)) (Message modified while forwarding at Topicbox) X-Received-Authentication-Results: tb-mx0.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC did not pass); dkim=invalid (public key: not available, 0-bit key sha256) header.d=polynum.com header.i=@polynum.com header.b=aULENzeF header.a=-sha256 header.s=202006 x-bits=0; dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=polynum.com; iprev=pass smtp.remote-ip=93.17.128.218 (smtp26.services.sfr.fr); spf=pass smtp.mailfrom=thierry.laronde@sfr.fr smtp.helo=smtp26.services.sfr.fr; x-aligned-from=fail; x-me-sender=none; x-ptr=pass smtp.helo=smtp26.services.sfr.fr policy.ptr=smtp26.services.sfr.fr; x-return-mx=pass header.domain=polynum.com policy.is_org=yes (MX Records found: spool.mail.gandi.net,fb.mail.gandi.net); x-return-mx=pass smtp.domain=sfr.fr policy.is_org=yes (MX Records found: smtp-in.sfr.fr); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9fans.net; h=date:from :to:subject:message-id:references:mime-version:content-type :content-transfer-encoding:in-reply-to:list-help:list-id :list-post:list-subscribe:reply-to:list-unsubscribe; s=dkim-1; bh=C7nxmEZkZLUSV9xIIVzVBevUIEPOqNsGK0vGvQ/BFBI=; b=Zyq3PTSzY1ix vQSqDS0D4Nz4q/SrAKwZMCjzpc0/OO0rQrI14idpgdRHq16hNclGUtX6jO3NSvZ4 LI91/rSkTvxDLpHa5+xqFlfmhSJbAU3r53stNk9kFXMKMkIS0egEvQhO2W8W3GUd vJv57gy0dVNcYwaHpQPMLVJ8RRRJvzs= Received: from tb-mx0.topicbox.com (localhost.local [127.0.0.1]) by tb-mx0.topicbox.com (Postfix) with ESMTP id ACBAA347BF4E for <9fans@9fans.net>; Thu, 2 Sep 2021 08:33:14 -0400 (EDT) (envelope-from thierry.laronde@sfr.fr) Received: from tb-mx0.topicbox.com (localhost [127.0.0.1]) by tb-mx0.topicbox.com (Authentication Milter) with ESMTP id D9E7AD05D7D; Thu, 2 Sep 2021 08:33:14 -0400 ARC-Seal: i=1; a=rsa-sha256; cv=none; d=topicbox.com; s=arcseal; t= 1630585994; b=V65mcH53CXQmNfk1l1oF0yM1hGao1AzfwCegX1MTWEbOmyHBEu Myzosm1MSw81bKl37dGamAYFmgS/9FPy1PSkGYAsClWHLbjStNDg37rv3h5+T7dp G8aYpEHgpYVOzlsXUVupyS9Zu5wLkofRnJNrf21G8nCJROizKJxakaxIfuXrgoIV oycyluD/qbMPHt4GbXpbfMoQ6uKrQXDMg87eUKENjdZa1nsoh6CnTByBZtGtk+nm Z5HwIehJFr3voXlA+iS5LqxAWsLbVigADfSPRbKteGeji/s8XOTfbXQnFC1Skcc8 2eNi2J05/VUiefBNUq1SKDpKhGef7rQ9knvg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=date:from:to:subject:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; s=arcseal; t=1630585994; bh=D1H4jJZoC4kVsl5BHNCAna iSRQsWnZCLdSB7fPC3kAI=; b=o+VYNfV7cynv5k6BGxnuN5ea/40SdnogQJ6cEU 1KaUkcGytgQBPxxaVUanvi5lzO+hilL7K+hrxu5Qj89PtvUCFlJYGxUHrv5WBEYv Y+c6tQHto+YairY884Ax0/gL/f9b9kFAccy5kD1iUHaK7Aaw2mCwwaGbP3WXm5Qt NNkaQbMhQSDEPTbd3YmGw3n0DaPIjWoSYyjZ4yNWc9OopzGQ6qUPhYyTLBcrZ0u6 QevdfQOPg7AdhBmSmcEN5QjVEz99/4hEr5GWXQOMXHMu2HIhAIrrG6sFhY8lqWhU q1MHc7rST/AwvOiRr5UJwbrglZoOUHByJ8FiqqBRxS6eSk5w== ARC-Authentication-Results: i=1; tb-mx0.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC did not pass); dkim=invalid (public key: not available, 0-bit key sha256) header.d=polynum.com header.i=@polynum.com header.b=aULENzeF header.a=-sha256 header.s=202006 x-bits=0; dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=polynum.com; iprev=pass smtp.remote-ip=93.17.128.218 (smtp26.services.sfr.fr); spf=pass smtp.mailfrom=thierry.laronde@sfr.fr smtp.helo=smtp26.services.sfr.fr; x-aligned-from=fail; x-me-sender=none; x-ptr=pass smtp.helo=smtp26.services.sfr.fr policy.ptr=smtp26.services.sfr.fr; x-return-mx=pass header.domain=polynum.com policy.is_org=yes (MX Records found: spool.mail.gandi.net,fb.mail.gandi.net); x-return-mx=pass smtp.domain=sfr.fr policy.is_org=yes (MX Records found: smtp-in.sfr.fr); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgedvtddruddvgedgkedtucdltddurdegudelrddttd dmucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgf nhhsuhgsshgtrhhisggvpdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttd enucenucfjughrpeffhffvuffkfhggtggugfgjsehtkeortddttddunecuhfhrohhmpeht lhgrrhhonhguvgesphholhihnhhumhdrtghomhenucggtffrrghtthgvrhhnpeeffeduhf ekhfeiudetgfehjeffffelieduvdekfeeuudffvdehveejgfehffehueenucffohhmrghi nhepkhgvrhhgihhsrdgtohhmpdhssghfrgdrfhhrnecukfhppeelfedrudejrdduvdekrd dvudekpdejjedrudelkedruddvuddrkeelnecuvehluhhsthgvrhfuihiivgeptdenucfr rghrrghmpehinhgvthepleefrddujedruddvkedrvddukedphhgvlhhopehsmhhtphdvie drshgvrhhvihgtvghsrdhsfhhrrdhfrhdpmhgrihhlfhhrohhmpeeothhhihgvrhhrhidr lhgrrhhonhguvgesshhfrhdrfhhrqe X-ME-VSScore: 0 X-ME-VSCategory: clean Received-SPF: pass (sfr.fr: 93.17.128.218 is authorized to use 'thierry.laronde@sfr.fr' in 'mfrom' identity (mechanism 'ip4:93.17.128.0/24' matched)) receiver=tb-mx0.topicbox.com; identity=mailfrom; envelope-from="thierry.laronde@sfr.fr"; helo=smtp26.services.sfr.fr; client-ip=93.17.128.218 Received: from smtp26.services.sfr.fr (unknown [93.17.128.218]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by tb-mx0.topicbox.com (Postfix) with ESMTPS for <9fans@9fans.net>; Thu, 2 Sep 2021 08:33:13 -0400 (EDT) (envelope-from thierry.laronde@sfr.fr) X-mail-filterd: {"version":"1.3.1","queueID":"504FA1C000C3C","contextId":"6826be1c-e485-4769-87eb-d439c46f05e2"} Received: from cauchy.polynum.local (89.121.198.77.rev.sfr.net [77.198.121.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by msfrf2642.sfr.fr (SMTP Server) with ESMTPS id 504FA1C000C3C for <9fans@9fans.net>; Thu, 2 Sep 2021 14:33:11 +0200 (CEST) X-mail-filterd: {"version":"1.3.1","queueID":"3314A1C000C1A","contextId":"f3880fe6-b901-41ea-9d7e-0f2772edbdc7"} X-sfr-mailing: LEGIT X-sfr-spamrating: 40 X-sfr-spam: not-spam Received: from cauchy.polynum.local (89.121.198.77.rev.sfr.net [77.198.121.89]) by msfrf2642.sfr.fr (SMTP Server) with ESMTP id 3314A1C000C1A for <9fans@9fans.net>; Thu, 2 Sep 2021 14:33:11 +0200 (CEST) Received: from cauchy.polynum.local (89.121.198.77.rev.sfr.net [77.198.121.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by msfrf2642.sfr.fr (SMTP Server) with ESMTPS for <9fans@9fans.net>; Thu, 2 Sep 2021 14:33:11 +0200 (CEST) Received: from cauchy.polynum.local (localhost [127.0.0.1]) by cauchy.polynum.local (8.15.2/8.15.2) with ESMTPS id 182CX83Q002957 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for <9fans@9fans.net>; Thu, 2 Sep 2021 14:33:09 +0200 (CEST) Received: (from tlaronde@localhost) by cauchy.polynum.local (8.15.2/8.14.9/Submit) id 182CX84a003092 for 9fans@9fans.net; Thu, 2 Sep 2021 14:33:08 +0200 (CEST) X-Authentication-Warning: cauchy.polynum.local: tlaronde set sender to thierry.laronde@sfr.fr using -f Date: Thu, 2 Sep 2021 14:33:08 +0200 From: tlaronde@polynum.com To: 9fans <9fans@9fans.net> Subject: Re: [9fans] kerTeX update: security fix Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: Topicbox-Policy-Reasoning: allow: sender is a member Topicbox-Message-UUID: f3d752f4-0be9-11ec-bc0c-d6be709b69ea Archived-At: =?UTF-8?B?PGh0dHBzOi8vOWZhbnMudG9waWNib3guY29tL2dyb3Vwcy85?= =?UTF-8?B?ZmFucy9UZmU5ZDAxZGQ5MTdkODg3NC1NYTZlNzM2ZDIzZDA0NTgzYzZlZGVk?= =?UTF-8?B?YThjPg==?= List-Help: List-Id: "9fans" <9fans.9fans.net> List-Post: List-Software: Topicbox v0 List-Subscribe: Precedence: list Reply-To: 9fans <9fans@9fans.net> List-Unsubscribe: , Topicbox-Delivery-ID: 2:9fans:437d30aa-c441-11e9-8a57-d036212d11b0:522be890-2105-11eb-b15e-8d699134e1fa:Ma6e736d23d04583c6ededa8c:1:hg0HMRNxsjddY8c-aos2MDLUrXrLrL-fvLU0prALmDI Le Thu, Sep 02, 2021 at 08:00:49AM -0400, Matthew Singletary a =C3=A9crit : > If you found a big in TeX, doesn't that mean you found an error in the TeX > book? Doesn't that mean you should get one of the famed checks from Knuth? >=20 Normally, yes (the check being now a symbolic reward)---by the way, it's not in the TeXbook but in "TeX: The Program" (and the same for METAFONT: The Program, since it is shared code; so for the very same reason, e-TeX and MetaPost). But unfortunately, for the moment, people involved for 35 years or more in the TeX community seem to be annoyed that this has escaped their prolonged scrutiny and are trying to find convoluted explanations in order to not classify it as a bug---D.E.K. has obviously better things to do, so he is not involved. IT give opportunity for social experiments too! --=20 Thierry Laronde http://www.kergis.com/ http://kertex.kergis.com/ http://www.sbfa.fr/ Key fingerprint =3D 0FF7 E906 FBAF FE95 FD89 250D 52B1 AE95 6006 F40C ------------------------------------------ 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/Tfe9d01dd917d8874-Ma6e73= 6d23d04583c6ededa8c Delivery options: https://9fans.topicbox.com/groups/9fans/subscription