rpms
/
texlive
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- remove arabxetex from ELN 

- fix luatex security, CVE-2023-32700
This commit is contained in:
Than Ngo 2023-06-20 18:29:24 +02:00
parent a4966946ea
commit c36fb1225b
2 changed files with 1345 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1322
texlive-2023-luatex-CVE-2023-32700.patch Normal file
View File

File diff suppressed because it is too large Load Diff

34
texlive.spec
View File

@ -26,7 +26,7 @@
Name: texlive
Version: %{source_date}
Release: 4%{?dist}
Release: 5%{?dist}
Epoch: %{tl_epoch}
Summary: TeX formatting system
Group: Applications/Publishing
@ -89,8 +89,8 @@ Source0115: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/anysize
Source0116: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/anysize.doc.tar.xz
Source0117: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/appendix.tar.xz
Source0118: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/appendix.doc.tar.xz
Source0120: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.tar.xz
Source0121: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.doc.tar.xz
#Source0120: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.tar.xz
#Source0121: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.doc.tar.xz
Source0123: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arphic.tar.xz
Source0124: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arphic.doc.tar.xz
Source0125: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/attachfile.tar.xz
@ -771,24 +771,25 @@ Source10005: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/acrony
Patch1: tl-kpfix.patch
Patch2: tl-format.patch
Patch5: texlive-2016-kpathsea-texlive-path.patch
# fix texmf.cnf so that it finds texinfo bits in Fedora
Patch8: texlive-20230311-texinfo-path-fix.patch
# fix annocheck issue detected by rpmdiff
Patch17: texlive-20180414-annocheck.patch
# Fix libgs detection in configure/configure.ac in dvisvgm
# Patch20: texlive-20190410-dvisvgm-fix-libgs-detection.patch
# Since we need to include tlmgr.pl for texconfig
# lets try to keep people from shooting themselves with it
Patch21: texlive-20190410-tlmgr-ignore-warning.patch
# Fix pdflatex run out of memory
Patch30: texlive-base-20220321-out-of-memory.patch
# Just remove obsolete decRefCnt check from configure, valid in either case.
Patch32: texlive-base-20220321-xpdf-no-GfxFont-decRefCnt.patch
# Remove deprecated setpdfwrite ghostscript call
# Patch33: texlive-base-20210325-no-setpdfwrite.patch
# libpaper v2 changes
# 1. one psutils test needs adjustment, see https://github.com/rrthomas/libpaper/issues/23
Patch37: texlive-base-libpaperv2.patch
@ -796,6 +797,9 @@ Patch37: texlive-base-libpaperv2.patch
# Fix issue where off_t could be set incorrectly on i686 due to order of header load
Patch44: texlive-base-20220321-pdf-header-order-fix.patch
# luatex CVE-2023-32700
Patch50: texlive-2023-luatex-CVE-2023-32700.patch
Patch101: etex-addlanguage-fix-bz1215257.patch
Patch108: texlive-2017-xepersian-python.patch
Patch109: texlive-2021-py3-and-pep8.patch
@ -18462,7 +18466,7 @@ Summary: XeTeX packages
BuildArch: noarch
Requires: texlive-base
Requires: texlive-collection-basic
Requires: tex-arabxetex
#Requires: tex-arabxetex
Requires: tex-awesomebox
#Requires: tex-bidi-atbegshi
#Requires: tex-bidicontour
@ -24207,6 +24211,7 @@ Philipp Lehmann's etoolbox.
%setup -q -c -T
xz -dc %{SOURCE0} | tar x
[ -e %{source_name} ] && mv %{source_name} source
%patch -P1 -p0
%patch -P2 -p1 -b .format
%patch -P5 -p0
@ -24215,14 +24220,14 @@ xz -dc %{SOURCE0} | tar x
%patch -P30 -p1 -b .out_of_memory
%patch -P32 -p1 -b .configure-no-GfxFont-decRefCnt
%patch -P37 -p1 -b .libpaper2
%patch -P44 -p1 -b .pdf-header-order-fix
%patch -P50 -p1 -b .luatex-CVE-2023-32700
# Setup copies of the licenses
for l in `unxz -c %{SOURCE3} | tar t`; do
ln -s %{_texdir}/licenses/$l $l
done
%patch -P44 -p1 -b .pdf-header-order-fix
# Disable broken tests
# updmap-cmdline-test.pl is not useful and it will fail because it finds the system perl bits instead of the local copy
sed -i 's|TESTS = tests/updmap-cmdline-test.pl||g' source/texk/texlive/Makefile.in
@ -24397,8 +24402,9 @@ xz -dc %{SOURCE115} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE116} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE117} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE118} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE120} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE121} | tar x -C %{buildroot}%{_texdir}/texmf-dist
# drop arabxetex
#xz -dc %{SOURCE120} | tar x -C %{buildroot}%{_texdir}/texmf-dist
#xz -dc %{SOURCE121} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE123} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE124} | tar x -C %{buildroot}%{_texdir}/texmf-dist
xz -dc %{SOURCE125} | tar x -C %{buildroot}%{_texdir}/texmf-dist
@ -25695,11 +25701,13 @@ yes | %{_bindir}/updmap-sys --quiet --syncwithtrees >/dev/null 2>&1 || :
%{_texdir}/texmf-dist/tex/latex/appendix/
%doc %{_texdir}/texmf-dist/doc/latex/appendix/
%if 0
%files arabxetex
%license lppl1.txt
%{_texdir}/texmf-dist/fonts/misc/xetex/fontmapping/arabxetex/
%{_texdir}/texmf-dist/tex/xelatex/arabxetex/
%doc %{_texdir}/texmf-dist/doc/xelatex/arabxetex/
%endif
%files arphic
%license other-free.txt
@ -28219,6 +28227,10 @@ yes | %{_bindir}/updmap-sys --quiet --syncwithtrees >/dev/null 2>&1 || :
%{_texdir}/texmf-dist/doc/latex/xpatch/
%changelog
* Tue Jun 20 2023 Than Ngo <than@redhat.com> - 12:20230311-5
- remove arabxetex from ELN
- fix luatex security, CVE-2023-32700
* Tue Jun 20 2023 Than Ngo <than@redhat.com> - 12:20230311-4
- updated scriptlet to generate system TL font maps
- drop tibetan