- remove arabxetex from ELN

- fix luatex security, CVE-2023-32700

texlive.spec

@@ -26,7 +26,7 @@
 
 Name: texlive
 Version: %{source_date}
-Release: 4%{?dist}
+Release: 5%{?dist}
 Epoch: %{tl_epoch}
 Summary: TeX formatting system
 Group: Applications/Publishing
@@ -89,8 +89,8 @@ Source0115: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/anysize
 Source0116: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/anysize.doc.tar.xz
 Source0117: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/appendix.tar.xz
 Source0118: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/appendix.doc.tar.xz
-Source0120: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.tar.xz
+#Source0120: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.tar.xz
-Source0121: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.doc.tar.xz
+#Source0121: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arabxetex.doc.tar.xz
 Source0123: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arphic.tar.xz
 Source0124: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/arphic.doc.tar.xz
 Source0125: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/attachfile.tar.xz
@@ -771,24 +771,25 @@ Source10005: https://ctan.math.illinois.edu/systems/texlive/tlnet/archive/acrony
 Patch1: tl-kpfix.patch
 Patch2: tl-format.patch
 Patch5: texlive-2016-kpathsea-texlive-path.patch
+
 # fix texmf.cnf so that it finds texinfo bits in Fedora
 Patch8: texlive-20230311-texinfo-path-fix.patch
+
 # fix annocheck issue detected by rpmdiff
 Patch17: texlive-20180414-annocheck.patch
+
 # Fix libgs detection in configure/configure.ac in dvisvgm
 # Patch20: texlive-20190410-dvisvgm-fix-libgs-detection.patch
 # Since we need to include tlmgr.pl for texconfig
 # lets try to keep people from shooting themselves with it
 Patch21: texlive-20190410-tlmgr-ignore-warning.patch
+
 # Fix pdflatex run out of memory
 Patch30: texlive-base-20220321-out-of-memory.patch
 
 # Just remove obsolete decRefCnt check from configure, valid in either case.
 Patch32: texlive-base-20220321-xpdf-no-GfxFont-decRefCnt.patch
 
-# Remove deprecated setpdfwrite ghostscript call
-# Patch33: texlive-base-20210325-no-setpdfwrite.patch
-
 # libpaper v2 changes
 # 1. one psutils test needs adjustment, see https://github.com/rrthomas/libpaper/issues/23
 Patch37: texlive-base-libpaperv2.patch
@@ -796,6 +797,9 @@ Patch37: texlive-base-libpaperv2.patch
 # Fix issue where off_t could be set incorrectly on i686 due to order of header load
 Patch44: texlive-base-20220321-pdf-header-order-fix.patch
 
+# luatex CVE-2023-32700
+Patch50: texlive-2023-luatex-CVE-2023-32700.patch
+
 Patch101: etex-addlanguage-fix-bz1215257.patch
 Patch108: texlive-2017-xepersian-python.patch
 Patch109: texlive-2021-py3-and-pep8.patch
@@ -18462,7 +18466,7 @@ Summary: XeTeX packages
 BuildArch: noarch
 Requires: texlive-base
 Requires: texlive-collection-basic
-Requires: tex-arabxetex
+#Requires: tex-arabxetex
 Requires: tex-awesomebox
 #Requires: tex-bidi-atbegshi
 #Requires: tex-bidicontour
@@ -24207,6 +24211,7 @@ Philipp Lehmann's etoolbox.
 %setup -q -c -T
 xz -dc %{SOURCE0} | tar x
 [ -e %{source_name} ] && mv %{source_name} source
+
 %patch -P1 -p0
 %patch -P2 -p1 -b .format
 %patch -P5 -p0
@@ -24215,14 +24220,14 @@ xz -dc %{SOURCE0} | tar x
 %patch -P30 -p1 -b .out_of_memory
 %patch -P32 -p1 -b .configure-no-GfxFont-decRefCnt
 %patch -P37 -p1 -b .libpaper2
+%patch -P44 -p1 -b .pdf-header-order-fix
+%patch -P50 -p1 -b .luatex-CVE-2023-32700
 
 # Setup copies of the licenses
 for l in `unxz -c %{SOURCE3} | tar t`; do
 ln -s %{_texdir}/licenses/$l $l
 done
 
-%patch -P44 -p1 -b .pdf-header-order-fix
-
 # Disable broken tests
 # updmap-cmdline-test.pl is not useful and it will fail because it finds the system perl bits instead of the local copy
 sed -i 's|TESTS = tests/updmap-cmdline-test.pl||g' source/texk/texlive/Makefile.in
@@ -24397,8 +24402,9 @@ xz -dc %{SOURCE115} | tar x -C %{buildroot}%{_texdir}/texmf-dist
 xz -dc %{SOURCE116} | tar x -C %{buildroot}%{_texdir}/texmf-dist
 xz -dc %{SOURCE117} | tar x -C %{buildroot}%{_texdir}/texmf-dist
 xz -dc %{SOURCE118} | tar x -C %{buildroot}%{_texdir}/texmf-dist
-xz -dc %{SOURCE120} | tar x -C %{buildroot}%{_texdir}/texmf-dist
+# drop arabxetex
-xz -dc %{SOURCE121} | tar x -C %{buildroot}%{_texdir}/texmf-dist
+#xz -dc %{SOURCE120} | tar x -C %{buildroot}%{_texdir}/texmf-dist
+#xz -dc %{SOURCE121} | tar x -C %{buildroot}%{_texdir}/texmf-dist
 xz -dc %{SOURCE123} | tar x -C %{buildroot}%{_texdir}/texmf-dist
 xz -dc %{SOURCE124} | tar x -C %{buildroot}%{_texdir}/texmf-dist
 xz -dc %{SOURCE125} | tar x -C %{buildroot}%{_texdir}/texmf-dist
@@ -25695,11 +25701,13 @@ yes | %{_bindir}/updmap-sys --quiet --syncwithtrees >/dev/null 2>&1 || :
 %{_texdir}/texmf-dist/tex/latex/appendix/
 %doc %{_texdir}/texmf-dist/doc/latex/appendix/
 
+%if 0
 %files arabxetex
 %license lppl1.txt
 %{_texdir}/texmf-dist/fonts/misc/xetex/fontmapping/arabxetex/
 %{_texdir}/texmf-dist/tex/xelatex/arabxetex/
 %doc %{_texdir}/texmf-dist/doc/xelatex/arabxetex/
+%endif
 
 %files arphic
 %license other-free.txt
@@ -28219,6 +28227,10 @@ yes | %{_bindir}/updmap-sys --quiet --syncwithtrees >/dev/null 2>&1 || :
 %{_texdir}/texmf-dist/doc/latex/xpatch/
 
 %changelog
+* Tue Jun 20 2023 Than Ngo <than@redhat.com> - 12:20230311-5
+- remove arabxetex from ELN
+- fix luatex security, CVE-2023-32700
+
 * Tue Jun 20 2023 Than Ngo <than@redhat.com> - 12:20230311-4
 - updated scriptlet to generate system TL font maps
 - drop tibetan