Re: Bug#1001785: texlive-extra affected by log4j CVEs
On Sat, 18 Dec 2021, Hilmar Preuße wrote:
> the jar file in question on the blacklist and hence remove it from the
Then you have to build a new tarball ... "kill" is better as far as I
remember ... since it works when the jar is in the orig tar, but will
not be installed.
Best
Norbert
--
PREINING Norbert https://www.preining.info
Fujitsu Research + IFMGA Guide + TU Wien + TeX Live
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
Reply to: