Changeset 9eed74c

Timestamp:

05/09/2023 06:12:10 PM (12 months ago)

Author:

Ken Moffat <ken@…>

Branches:

12.0, 12.1, kea, ken/TL2024, ken/tuningfonts, lazarus, lxqt, plabs/newcss, python3.11, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/xf86-video-removal

Children:

973598a

Parents:

665cb6c9

git-author:

Ken Moffat <ken@…> (05/09/2023 06:08:57 PM)

git-committer:

Ken Moffat <ken@…> (05/09/2023 06:12:10 PM)

Message:

Patch texlive for a security fix.

Also add a Warning in install-tl-unx.

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• pst/typesetting/texlive.xml (modified) (4 diffs)
• pst/typesetting/tl-installer.xml (modified) (1 diff)

introduction/welcome/changelog.xml

@@ -43 +43 @@
      <itemizedlist>
        <listitem>
+         <para>[ken] - Patch texlive source for a security fix.
+         <ulink url="&blfs-ticket-root;18006">#18006</ulink>.</para>
+       </listitem>
+       <listitem>
          <para>[bdubbs] - Update to libxslt-1.1.38. Fixes
          <ulink url="&blfs-ticket-root;18026">#18026</ulink>.</para>

pst/typesetting/texlive.xml

@@ -181 +181 @@
       </listitem>
 
-<!--  <listitem>
+      <listitem>
         <para>
           Required patch: <ulink url=
-          "&patch-root;/texlive-&texlive-version;-upstream_fixes-1.patch"/>
-        </para>
-      </listitem>-->
+          "&patch-root;/texlive-&texlive-version;-source-security_fix-1.patch"/>
+        </para>
+      </listitem>
     </itemizedlist>
 
@@ -253 +253 @@
 
 <screen><userinput>export TEXARCH=$(uname -m | sed -e 's/i.86/i386/' -e 's/$/-linux/') &amp;&amp;
+
+patch -Np1 -i ../texlive-&texlive-version;-source-security_fix-1.patch &amp;&amp;
 
 mkdir texlive-build &amp;&amp;
@@ -388 +390 @@
 
 <!-- I've put blank lines in this to make it a little less hard to read. ken -->
-<screen role="root"><userinput>mkdir -pv $TEXLIVE_PREFIX/texmf-var/luatex-cache/context/ &amp;&amp;
+<screen role="root"><userinput>sed -e '/local template=\[\[--ini/s/\(primaryflags%\)\(.*\)/\1 --socket --shell-escape \2/' \
+ -e '/local template=\[\[%primaryflags%/s/\(primaryflags%\)\(.*\)/\1 --socket --shell-escape \2/' \
+  -i $TEXLIVE_PREFIX/texmf-dist/scripts/context/lua/mtxrun.lua &amp;&amp;
+
+mkdir -pv $TEXLIVE_PREFIX/texmf-var/luatex-cache/context/ &amp;&amp;
 
 ln -sfv /$TEXLIVE_PREFIX/texmf-dist/scripts/context/lua/mtxrun.lua \
@@ -412 +418 @@
   <sect2 role="commands">
     <title>Command Explanations</title>
+
+    <para>
+      <command>patch -Np1 -i ../texlive-&texlive-version;-source-security_fix-1.patch</command>:
+      this updates the luatex source to v1.17.0 to fix security issues.
+    </para>
+
+    <para>
+      <command>sed -e '/local template (...)' (...)mtxrun.lua</command>: this makes a
+      change in a texmf-dist script so that ConTeXt can now run with luatex-v1.17.0.
+    </para>
 
     <para>

pst/typesetting/tl-installer.xml

@@ -176 +176 @@
       <CCYYMMDD> by the correct directory name.
     </para>
+
+    <warning>
+      <para>
+        If you have installed any of the luatex programs (luatex, luahbtex,
+        luajitex, luajithbtex) or ConTeXt with the luametatex backend there
+        was a security issue fixed by the introduction of luatex v1.17.0.
+        You should check the version with 'luatex --version' and if it is
+        less than 1.17.0 you can use tlmgr to update.
+      </para>
+    </warning>
 
     <note>