Astra Linux – vulnerability in texlive-bin

LuaTeX versions prior to 1.17.0 allow a document compiled with default settings to make arbitrary network requests. This happens because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live versions prior to 2023 r66984 and MiKTeX...