Hi all,
here are some patches we have in Debian (besides others) that might
be either of interest for others or could be included in TL.
Attached are four patches:
* mktexlsr-use-mktemp
don't use guessable names in mktexlsr tmp file to
prevent tmp file attacks
* relax-zlib-version-check (for luatex)
luatex checks on runtime for 5 digits of the zlib version,
that is for a.b.c instead of a.b only, which should
suffice for API compatibility
adjust this
(cc-ing Luigi and luatex-dev)