slackware-current/patches/packages/texlive-2023.230322-x86_64-1_slack15.0.txt

texlive: texlive (TeX binaries, support files, and formats)
texlive:
texlive: This package contains binaries, support files, TeX formats and
texlive: packages, and other files included in the TeXLive TeX distribution.
texlive: Included are input files for TeX, runtime configuration files,
texlive: hyphenation tables, manpages, and the computer modern fonts.
texlive:
texlive: SlackBuilds.org has more texmf files and documentation in the
texlive: texlive-extra and texlive-docs packages.
texlive:
texlive:
Thu May 25 00:24:33 UTC 2023 patches/packages/curl-8.1.1-x86_64-1_slack15.0.txz: Upgraded. This is a bugfix release. patches/packages/texlive-2023.230322-x86_64-1_slack15.0.txz: Upgraded. This update patches a security issue: LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5. Thanks to Johannes Schoepfer. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-32700 (* Security fix *) 2023-05-25 02:24:33 +02:00			`texlive: texlive (TeX binaries, support files, and formats)`
			`texlive:`
			`texlive: This package contains binaries, support files, TeX formats and`
			`texlive: packages, and other files included in the TeXLive TeX distribution.`
			`texlive: Included are input files for TeX, runtime configuration files,`
			`texlive: hyphenation tables, manpages, and the computer modern fonts.`
			`texlive:`
			`texlive: SlackBuilds.org has more texmf files and documentation in the`
			`texlive: texlive-extra and texlive-docs packages.`
			`texlive:`
			`texlive:`