Changeset 322b688 for pst/typesetting/texlive.xml

Timestamp:

10/09/2018 06:43:22 PM (6 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 8.4, 9.0, 9.1, bdubbs/svn, elogind, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

ecbf490

Parents:

91219185

Message:

Texlive - update patch for vulnerability fixes, and to build with poppler-0.68.0, 0.69.0. Tested on 8.3/p-0.67, svn/p-0.68, 8.2/p-0.62, 8.1 with shipped poppler, p-0.57 was too old. Thanks to Douglas for notifying me of this.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@20608 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• pst/typesetting/texlive.xml (modified) (4 diffs)

pst/typesetting/texlive.xml

@@ -104 +104 @@
       <listitem>
         <para>Required patch: <ulink
-        url="&patch-root;/texlive-&texlive-version;-source-upstream_fixes-1.patch"/></para>
+        url="&patch-root;/texlive-&texlive-version;-source-upstream_fixes-2.patch"/></para>
       </listitem>
     </itemizedlist>
@@ -162 +162 @@
         variable to let <systemitem class="username">root</systemitem> use it.
       </para>
+
+      <para>
+        If you came here to update an old system (because of the recent
+        vulnerability) where the poppler version is before 0.62.0, such as
+        BLFS-8.1, do NOT use the commands in the <literal>MYPOPPLER</literal>
+        block of instructions, nor the <literal>--with-system-poppler</literal>
+        or <literal>--with-system-xpdf</literal> options when configuring.
+      </para>
     </note>
 
@@ -169 +177 @@
 <screen><userinput>export TEXARCH=$(uname -m | sed -e 's/i.86/i386/' -e 's/$/-linux/') &amp;&amp;
 
-patch -Np1 -i ../texlive-&texlive-version;-source-upstream_fixes-1.patch &amp;&amp;
-
-mv -v texk/web2c/pdftexdir/pdftoepdf{-newpoppler,}.cc &amp;&amp;
-mv -v texk/web2c/pdftexdir/pdftosrc{-newpoppler,}.cc  &amp;&amp;
+patch -Np1 -i ../texlive-&texlive-version;-source-upstream_fixes-2.patch &amp;&amp;
+
+let MYPOPPLER=$(pkg-config --modversion poppler | cut -d '.' -f2)
+mv -v texk/web2c/pdftexdir/pdftosrc{-newpoppler,}.cc
+if [ $MYPOPPLER -lt 68 ]; then
+  mv -v texk/web2c/pdftexdir/pdftoepdf{-newpoppler,}.cc
+elif [ $MYPOPPLER -lt 69 ]; then
+  mv -v texk/web2c/pdftexdir/pdftoepdf{-poppler0.68.0,}.cc
+else
+  mv -v texk/web2c/pdftexdir/pdftoepdf{-poppler0.69.0,}.cc
+fi &amp;&amp;
+unset MYPOPPLER &amp;&amp;
 
 mkdir texlive-build &amp;&amp;
@@ -260 +276 @@
 
     <para>
-      <command>patch -Np1 -i ../texlive-&texlive-version;-source-upstream_fixes-1.patch</command>:
+      <command>patch -Np1 -i ../texlive-&texlive-version;-source-upstream_fixes-2.patch</command>:
       various problems have come to light since the shipped source was frozen to
       be committed to DVDs. In particular, a segmentation fault in dvipdfm-x from
-      XeTeX and changes in upstream poppler-0.64.0.
-    </para>
-
-    <para>
-      <command>mv -v texk/web2c/pdftexdir/pdftoepdf{-newpoppler,}.cc ...</command>:
-      The &texlive-year; version of texlive ships with support for poppler-0.57.0
-      and older, but it includes alternative newpoppler files which enable building
-      with poppler-0.62.0 or newer.
+      XeTeX and changes in newer versions of <application>poppler</application>,
+      also an important vulnerability fix.
+    </para>
+
+    <para>
+      <command>let MYPOPPLER=...</command>: Because the vulnerability fix applies to
+      many past years of <application>texlive</application>, the tests aim to allow
+      updating using system versions of poppler since 0.62.0. The amended files for
+      newer versions of poppler need to be copied over the original versions,
+      depending on which version is being used.
     </para>