rpms/texlive
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: #2209873, CVE-2023-32700

Browse Source
This commit is contained in:
Than Ngo 2023-05-26 15:40:33 +02:00
parent 8b68f77db7
commit 722f1c952d
2 changed files with 1329 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1306
texlive-2022-luatex-CVE-2023-32700.patch Normal file
View File

File diff suppressed because it is too large Load Diff

39
texlive.spec
View File

@ -24,7 +24,7 @@
Name: texlive
Version: %{source_date}
Release: 25%{?dist}
Release: 26%{?dist}
Epoch: %{tl_epoch}
Summary: TeX formatting system
Group: Applications/Publishing
@ -835,6 +835,9 @@ Patch101: etex-addlanguage-fix-bz1215257.patch
Patch108: texlive-2017-xepersian-python.patch
Patch109: texlive-2019-py3-and-pep8.patch
Patch110: tabu-update-to-git-930bc77.patch
# upstream
# LuaTeX Security Vulnerabilities, CVE-2023-32700
Patch200: texlive-2022-luatex-CVE-2023-32700.patch
%description
The TeX Live software distribution offers a complete TeX system for a
@ -24308,28 +24311,29 @@ Philipp Lehmann's etoolbox.
%setup -q -c -T
xz -dc %{SOURCE0} | tar x
[ -e %{source_name} ] && mv %{source_name} source
%patch1 -p0
%patch2 -p1 -b .format
%patch5 -p0
%patch -P1 -p0
%patch -P2 -p1 -b .format
%patch -P5 -p0
%if 0%{?fedora} || 0%{?rhel} >= 8
%patch7 -p1 -b .newpoppler
%patch -P7 -p1 -b .newpoppler
%endif
%patch8 -p1 -b .texinfo-fix
%patch11 -p1 -b .dt
%patch15 -p1 -b .disabletest
%patch17 -p1 -b .annocheck
%patch -P8 -p1 -b .texinfo-fix
%patch -P11 -p1 -b .dt
%patch -P15 -p1 -b .disabletest
%patch -P17 -p1 -b .annocheck
%if 0%{?fedora} || 0%{?rhel} >= 8
%patch18 -p1 -b .poppler-0.73
%patch -P18 -p1 -b .poppler-0.73
%endif
%patch19 -p1 -b .shh
%patch20 -p1 -b .fix-libgs-detection
%patch -P19 -p1 -b .shh
%patch -P20 -p1 -b .fix-libgs-detection
%if 0%{?fedora} || 0%{?rhel} >= 8
%patch23 -p1 -b .poppler-0.84
%patch -P23 -p1 -b .poppler-0.84
%endif
%patch28 -p1 -b .CVE-2019-19601
%patch -P28 -p1 -b .CVE-2019-19601
%if 0%{?fedora} >= 33 || 0%{?rhel} >= 9
%patch29 -p1 -b .poppler090
%patch -P29 -p1 -b .poppler090
%endif
%patch -P200 -p1
# Setup copies of the licenses
for l in `unxz -c %{SOURCE2} | tar t`; do
@ -28241,7 +28245,7 @@ done <<< "$list"
%license lppl1.3.txt
%{_texdir}/texmf-dist/tex/latex/minitoc/
# drop minitoc/minitoc.dtx due to bad license
#doc %{_texdir}/texmf-dist/doc/latex/minitoc/
# %%doc %%{_texdir}/texmf-dist/doc/latex/minitoc/
%files notoccite
%license pd.txt
@ -28395,6 +28399,9 @@ done <<< "$list"
%{_texdir}/texmf-dist/doc/latex/xpatch/
%changelog
* Fri May 26 2023 Than Ngo <than@redhat.com> - 9:20200406-26
- Resolves: #2209873, CVE-2023-32700
* Mon Feb 14 2022 Than Ngo <than@redhat.com> - 9:20200406-25
- Resolves: #2031879, fix invalid symlink to mktexmf