slackware-current/patches/source/texlive/texlive.url

https://ctan.net/systems/texlive/Source/texlive-20230311-source.tar.xz
http://slackware.schoepfer.info/slackbuilds/texlive/texlive-base-230322.tar.xz
Thu May 25 00:24:33 UTC 2023 patches/packages/curl-8.1.1-x86_64-1_slack15.0.txz: Upgraded. This is a bugfix release. patches/packages/texlive-2023.230322-x86_64-1_slack15.0.txz: Upgraded. This update patches a security issue: LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5. Thanks to Johannes Schoepfer. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-32700 (* Security fix *) 2023-05-25 02:24:33 +02:00			`https://ctan.net/systems/texlive/Source/texlive-20230311-source.tar.xz`
			`http://slackware.schoepfer.info/slackbuilds/texlive/texlive-base-230322.tar.xz`