texlive/texlive-mpost-CVE-2016-10243.patch
Troy Dawson 4c0ca22a72 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/texlive#6c615e0bb91c156585502e5e878bd5955e9a2a44
2020-10-15 15:45:26 -07:00

21 lines
843 B
Diff

diff -U0 texlive-2016/source/texk/kpathsea/ChangeLog.than texlive-2016/source/texk/kpathsea/ChangeLog
--- texlive-2016/source/texk/kpathsea/ChangeLog.than 2017-03-07 17:36:09.052243607 +0100
+++ texlive-2016/source/texk/kpathsea/ChangeLog 2017-03-07 17:36:55.525484239 +0100
@@ -0,0 +1,5 @@
+2016-11-30 Karl Berry <karl@ks.tug.org>
+
+ * texmf.cnf (shell_escape_commands): remove mpost, due to
+ the -tex option. Oops! Report from Bruno Le Floch.
+
diff -up texlive-2016/source/texk/kpathsea/texmf.cnf.than texlive-2016/source/texk/kpathsea/texmf.cnf
--- texlive-2016/source/texk/kpathsea/texmf.cnf.than 2017-03-07 17:37:14.160778751 +0100
+++ texlive-2016/source/texk/kpathsea/texmf.cnf 2017-03-07 17:37:39.688812317 +0100
@@ -568,7 +568,6 @@ extractbb,\
gregorio,\
kpsewhich,\
makeindex,\
-mpost,\
repstopdf,\
% we'd like to allow: