Ubuntu
texlive-bin package

texlive-bin 2019.20190605.51237-3ubuntu0.2 source package in Ubuntu

Changelog

texlive-bin (2019.20190605.51237-3ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: sprintf mishandling in axohelp
    - debian/patches/CVE-2019-18604.patch: fix overflow bugs in
      utils/axodraw2/*.
    - CVE-2019-18604
  * SECURITY UPDATE: arbitrary network requests via socket library
    - debian/patches/CVE-2023-32668.patch: disable socket library by
      default in texk/web2c/luatexdir/lua/loslibext.c,
      texk/web2c/luatexdir/lua/luainit.c,
      texk/web2c/luatexdir/lua/luastuff.c,
      texk/web2c/luatexdir/lua/luatex-api.h,
      texk/web2c/luatexdir/luasocket/src/lua_preload.c.
    - CVE-2023-32668
  * SECURITY UPDATE: heap overflow in ttfdump (LP: #2047912)
    - debian/patches/CVE-2024-25262.diff: add overflow check to
      texk/ttfdump/libttf/hdmx.c.
    - CVE-2024-25262

 -- Marc Deslauriers <email address hidden>  Wed, 13 Mar 2024 10:19:47 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
tex
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main tex
Focal security main tex

Downloads

File Size SHA-256 Checksum
texlive-bin_2019.20190605.51237.orig.tar.xz 20.6 MiB 8d5d4636b3641805c1707aab3618a59b80a0bc8757ab81bc7cdfe1f2dac88801
texlive-bin_2019.20190605.51237-3ubuntu0.2.debian.tar.xz 127.4 KiB 7498c16a8e4ccadcf37492933703cdfd708823419ec804fb4644e6f4b18200b8
texlive-bin_2019.20190605.51237-3ubuntu0.2.dsc 3.3 KiB 6f72a9963f4f7a877fd78f1eec85f7dee42bed0fafde131590e4d2488117e1c7

View changes file

Binary packages built by this source

libkpathsea-dev: TeX Live: path search library for TeX (development part)

 This package contains the static library and header files for the
 Kpathsea[rch] library, which implements generic path searching,
 configuration, and TeX-specific file searching.

libkpathsea6: TeX Live: path search library for TeX (runtime part)

 This package contains the runtime part of the Kpathsea[rch] library,
 which implements generic path searching, configuration, and
 TeX-specific file searching.

libkpathsea6-dbgsym: debug symbols for libkpathsea6
libptexenc-dev: TeX Live: ptex encoding library (development part)

 This package contains the static library and header files for the
 ptexenc library, a library for encoding support in pTeX, a Japanese
 TeX engine.

libptexenc1: TeX Live: pTeX encoding library

 library for encoding support in pTeX, a Japanese TeX engine.

libptexenc1-dbgsym: debug symbols for libptexenc1
libsynctex-dev: Tex Live: SyncTeX parser library (development part)

 This package contains the static library and header files for the SyncTex
 parser library.

libsynctex2: TeX Live: SyncTeX parser library

 Library for SyncTeX parsing support.

libsynctex2-dbgsym: debug symbols for libsynctex2
libtexlua53: TeX Live: Lua 5.3, modified for use with LuaTeX

 The Lua 5.3 library as used within LuaTeX.

libtexlua53-dbgsym: debug symbols for libtexlua53
libtexlua53-dev: Tex Live: Lua 5.3, modified for use with LuaTeX (development part)

 This package contains the static library and header files for the texlua
 library.

libtexluajit-dev: Tex Live: LuaJIT, modified for use with LuaJITTeX (development part)

 This package contains the static library and header files for the texluajit
 library.

libtexluajit2: TeX Live: LuaJIT, modified for use with LuaJITTeX

 The LuaJIT library as used within LuaJITTeX.

libtexluajit2-dbgsym: debug symbols for libtexluajit2
texlive-binaries: Binaries for TeX Live

 This package contains all the binaries of TeX Live packages.
 .
 Note that this package alone has hardly any functionality. Rather,
 choose the texlive-* packages you want to use, e.g.
 texlive-latex-recommended or context

texlive-binaries-dbgsym: debug symbols for texlive-binaries