import texlive-20200406-26.el9_2

SPECS/texlive.spec

@@ -24,7 +24,7 @@
 
 Name: texlive
 Version: %{source_date}
-Release: 25%{?dist}
+Release: 26%{?dist}
 Epoch: %{tl_epoch}
 Summary: TeX formatting system
 Group: Applications/Publishing
@@ -835,6 +835,9 @@ Patch101: etex-addlanguage-fix-bz1215257.patch
 Patch108: texlive-2017-xepersian-python.patch
 Patch109: texlive-2019-py3-and-pep8.patch
 Patch110: tabu-update-to-git-930bc77.patch
+# upstream
+# LuaTeX Security Vulnerabilities, CVE-2023-32700
+Patch200: texlive-2022-luatex-CVE-2023-32700.patch
 
 %description
 The TeX Live software distribution offers a complete TeX system for a
@@ -24308,28 +24311,29 @@ Philipp Lehmann's etoolbox.
 %setup -q -c -T
 xz -dc %{SOURCE0} | tar x
 [ -e %{source_name} ] && mv %{source_name} source
-%patch1 -p0
+%patch -P1 -p0
-%patch2 -p1 -b .format
+%patch -P2 -p1 -b .format
-%patch5 -p0
+%patch -P5 -p0
 %if 0%{?fedora} || 0%{?rhel} >= 8
-%patch7 -p1 -b .newpoppler
+%patch -P7 -p1 -b .newpoppler
 %endif
-%patch8 -p1 -b .texinfo-fix
+%patch -P8 -p1 -b .texinfo-fix
-%patch11 -p1 -b .dt
+%patch -P11 -p1 -b .dt
-%patch15 -p1 -b .disabletest
+%patch -P15 -p1 -b .disabletest
-%patch17 -p1 -b .annocheck
+%patch -P17 -p1 -b .annocheck
 %if 0%{?fedora} || 0%{?rhel} >= 8
-%patch18 -p1 -b .poppler-0.73
+%patch -P18 -p1 -b .poppler-0.73
 %endif
-%patch19 -p1 -b .shh
+%patch -P19 -p1 -b .shh
-%patch20 -p1 -b .fix-libgs-detection
+%patch -P20 -p1 -b .fix-libgs-detection
 %if 0%{?fedora} || 0%{?rhel} >= 8
-%patch23 -p1 -b .poppler-0.84
+%patch -P23 -p1 -b .poppler-0.84
 %endif
-%patch28 -p1 -b .CVE-2019-19601
+%patch -P28 -p1 -b .CVE-2019-19601
 %if 0%{?fedora} >= 33 || 0%{?rhel} >= 9
-%patch29 -p1 -b .poppler090
+%patch -P29 -p1 -b .poppler090
 %endif
+%patch -P200 -p1
 
 # Setup copies of the licenses
 for l in `unxz -c %{SOURCE2} | tar t`; do
@@ -28241,7 +28245,7 @@ done <<< "$list"
 %license lppl1.3.txt
 %{_texdir}/texmf-dist/tex/latex/minitoc/
 # drop minitoc/minitoc.dtx due to bad license
-#doc %{_texdir}/texmf-dist/doc/latex/minitoc/
+# %%doc %%{_texdir}/texmf-dist/doc/latex/minitoc/
 
 %files notoccite
 %license pd.txt
@@ -28395,6 +28399,9 @@ done <<< "$list"
 %{_texdir}/texmf-dist/doc/latex/xpatch/
 
 %changelog
+* Fri May 26 2023 Than Ngo <than@redhat.com> - 9:20200406-26
+- Resolves: #2209872, CVE-2023-32700
+
 * Mon Feb 14 2022 Than Ngo <than@redhat.com> - 9:20200406-25
 - Resolves: #2031879, fix invalid symlink to mktexmf