[XeTeX] How to manually create the xelatex.fmt?

[Philip TAYLOR (Webmaster, Ret'd)]

Chris Travers wrote:

> If TexLive had been around in 2002 and was statically linking to zlib,
> it would have been affected too.  TeX does not link against zlib but
> LaTeX and XeTeX do.
>
> Similarly, arbitrary code execution vulnerabilities have been found in
> 2005 in libjpeg (also linked to by LaTeX and XeTeX).  Again these
> predate TexLive.

Chris, these statements have to be wrong, at least in part :
if TeX does not link against Zlib, then neither does LaTeX --
they are one and the same engine.  -- ditto -- LibJpeg.

Philip Taylor