texlive-bin (2021.20210626.59705-1ubuntu0.2) jammy-security; urgency=medium
* SECURITY UPDATE: arbitrary network requests via socket library
- debian/patches/CVE-2023-32668.patch: disable socket library by
default in texk/web2c/luatexdir/lua/loslibext.c,
texk/web2c/luatexdir/lua/luainit.c,
texk/web2c/luatexdir/lua/luastuff.c,
texk/web2c/luatexdir/lua/luatex-api.h,
texk/web2c/luatexdir/luasocket/src/lua_preload.c.
- CVE-2023-32668
* SECURITY UPDATE: heap overflow in ttfdump (LP: #2047912)
- debian/patches/CVE-2024-25262.diff: add overflow check to
texk/ttfdump/libttf/hdmx.c.
- CVE-2024-25262
-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 13 Mar 2024 10:11:46 -0400
texlive-bin (2021.20210626.59705-1ubuntu0.1) jammy-security; urgency=medium
* SECURITY UPDATE: Arbitrary Code Execution
- debian/patches/CVE-2023-32700.patch: Fix improperly secured
shell-escape in LuaTeX.
- CVE-2023-32700
-- Eduardo Barretto <eduardo.barretto@canonical.com> Thu, 25 May 2023 14:33:01 +0200
texlive-bin (2021.20210626.59705-1build1) jammy; urgency=medium
* No-change rebuild for icu soname change.
-- Matthias Klose <doko@ubuntu.com> Wed, 09 Feb 2022 05:52:43 +0100
texlive-bin (2021.20210626.59705-1) unstable; urgency=medium
[ Debian Janitor ]
* Remove constraints unnecessary since stretch:
+ Build-Depends: Drop versioned constraint on autoconf, libtool and m4.
+ texlive-binaries: Drop versioned constraint on dpkg and tex-common in
Depends.
+ texlive-binaries: Drop versioned constraint on m-tx, musixtex, pmx, tex4ht
and texlive-base in Replaces.
+ texlive-binaries: Drop versioned constraint on context, m-tx, musixtex,
pmx, tex-common and tex4ht in Breaks.
+ libkpathsea6: Drop versioned constraint on texlive-base in Breaks.
+ libptexenc1: Drop versioned constraint on texlive-base in Breaks.
[ Norbert Preining ]
* New upstream TeX Live 2021
* Update lintian override
-- Norbert Preining <norbert@preining.info> Sun, 15 Aug 2021 22:38:02 +0900
texlive-bin (2020.20200327.54578-7) unstable; urgency=medium
* Backport several security fixes for shell escape exploits in
xdvi, luatex, general write18 implementation.
-- Norbert Preining <norbert@preining.info> Sat, 13 Mar 2021 09:31:55 +0900
texlive-bin (2020.20200327.54578-6) unstable; urgency=medium
* Reduce B-D (Closes: #979607)
Thanks to Helmut Grohne for finding the minimal set.
* Bump standards version to 4.5.1, no changes necessary.
-- Norbert Preining <norbert@preining.info> Sat, 16 Jan 2021 14:31:47 +0900
texlive-bin (2020.20200327.54578-5) unstable; urgency=medium
* Replace "DEB_BUILD_OPTIONS=parallel=8" by "dh $@ ... --max-parallel=8".
* Add patch dvi2tty_man.diff to fix errors in manual page of dvi2tty.
(Closes: #958728)
* Change Maintainer field to "Debian TeX Task Force".
* Add manual page for mflua (using help2man).
* Lintian:
- I: capitalization-error-in-description-synopsis Tex TeX
- W: national-encoding (two files)
- P: silent-on-rules-requiring-root
- W: mismatched-override embedded-library
- W: groff-message usr/share/man/man1/detex.1.gz 76: warning:
can't find special character '..'
- W: wrong-manual-section usr/share/man/man1/axohelp.1.gz:1 1 != 1.1
- I: typo-in-manual-page usr/share/man/man1/dvi2tty.1.gz
- Override "W: no-manual-page"
+ in case the page is provided from a different package
+ page can only be found using apropos
- Override
"I: texlive-binaries: spare-manual-page usr/share/man/man1/cweb.1.gz"
-- Hilmar Preusse <hille42@web.de> Wed, 23 Sep 2020 23:38:34 +0200
texlive-bin (2020.20200327.54578-4) unstable; urgency=medium
* Add Conflict w/ texlive-luatex (<< 2020.20200329).
(Closes: #956884)
* Avoid massive parallel builds on powerpc, ppc64, sparc64. Limit
to -j8 (2nd try). This hopefully (Closes: #956605).
-- Hilmar Preusse <hille42@web.de> Sat, 18 Apr 2020 07:38:25 +0200
texlive-bin (2020.20200327.54578-3) unstable; urgency=medium
* Add Conflict w/ texlive-extra-utils (<< 2020.20200329).
(Closes: #956587)
* Avoid massive parallel builds on powerpc, ppc64, sparc64. Limit
to -j8. This hopefully Closes: #956605 .
-- Hilmar Preusse <hille42@web.de> Wed, 15 Apr 2020 21:38:34 +0200
texlive-bin (2020.20200327.54578-2) unstable; urgency=medium
* TeX Live 2020
-- Norbert Preining <norbert@preining.info> Mon, 30 Mar 2020 09:01:24 +0900
# For older changelog entries, run 'apt-get changelog libkpathsea6'
Generated by dwww version 1.14 on Sat Jan 18 04:48:07 CET 2025.