texlive-bin (2021.20210626.59705-1ubuntu0.3) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2022-24106.patch: prevent the 'interleaved' flag
      from being changed after the first scan of an image in
      libs/xpdf/xpdf-src/xpdf/Stream.cc.
    - CVE-2022-24106
  * SECURITY UPDATE: integer overflow
    - debian/patches/CVE-2022-24107.patch: check for integer overflow in
      libs/xpdf/xpdf-src/xpdf/JPXStream.cc.
    - CVE-2022-24107

 -- Edwin Jiang <edwin.jiang@canonical.com>  Tue, 27 Jan 2026 17:36:46 +0000

texlive-bin (2021.20210626.59705-1ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: arbitrary network requests via socket library
    - debian/patches/CVE-2023-32668.patch: disable socket library by
      default in texk/web2c/luatexdir/lua/loslibext.c,
      texk/web2c/luatexdir/lua/luainit.c,
      texk/web2c/luatexdir/lua/luastuff.c,
      texk/web2c/luatexdir/lua/luatex-api.h,
      texk/web2c/luatexdir/luasocket/src/lua_preload.c.
    - CVE-2023-32668
  * SECURITY UPDATE: heap overflow in ttfdump (LP: #2047912)
    - debian/patches/CVE-2024-25262.diff: add overflow check to
      texk/ttfdump/libttf/hdmx.c.
    - CVE-2024-25262

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 13 Mar 2024 10:11:46 -0400

texlive-bin (2021.20210626.59705-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Arbitrary Code Execution
    - debian/patches/CVE-2023-32700.patch: Fix improperly secured
      shell-escape in LuaTeX.
    - CVE-2023-32700

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Thu, 25 May 2023 14:33:01 +0200

texlive-bin (2021.20210626.59705-1build1) jammy; urgency=medium

  * No-change rebuild for icu soname change.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 09 Feb 2022 05:52:43 +0100

texlive-bin (2021.20210626.59705-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since stretch:
    + Build-Depends: Drop versioned constraint on autoconf, libtool and m4.
    + texlive-binaries: Drop versioned constraint on dpkg and tex-common in
      Depends.
    + texlive-binaries: Drop versioned constraint on m-tx, musixtex, pmx, tex4ht
      and texlive-base in Replaces.
    + texlive-binaries: Drop versioned constraint on context, m-tx, musixtex,
      pmx, tex-common and tex4ht in Breaks.
    + libkpathsea6: Drop versioned constraint on texlive-base in Breaks.
    + libptexenc1: Drop versioned constraint on texlive-base in Breaks.

  [ Norbert Preining ]
  * New upstream TeX Live 2021
  * Update lintian override

 -- Norbert Preining <norbert@preining.info>  Sun, 15 Aug 2021 22:38:02 +0900

texlive-bin (2020.20200327.54578-7) unstable; urgency=medium

  * Backport several security fixes for shell escape exploits in
    xdvi, luatex, general write18 implementation.

 -- Norbert Preining <norbert@preining.info>  Sat, 13 Mar 2021 09:31:55 +0900

texlive-bin (2020.20200327.54578-6) unstable; urgency=medium

  * Reduce B-D (Closes: #979607)
    Thanks to Helmut Grohne for finding the minimal set.
  * Bump standards version to 4.5.1, no changes necessary.

 -- Norbert Preining <norbert@preining.info>  Sat, 16 Jan 2021 14:31:47 +0900

texlive-bin (2020.20200327.54578-5) unstable; urgency=medium

  * Replace "DEB_BUILD_OPTIONS=parallel=8" by "dh $@ ... --max-parallel=8".
  * Add patch dvi2tty_man.diff to fix errors in manual page of dvi2tty.
    (Closes: #958728)
  * Change Maintainer field to "Debian TeX Task Force".
  * Add manual page for mflua (using help2man).
  * Lintian:
    - I: capitalization-error-in-description-synopsis Tex TeX
    - W: national-encoding (two files)
    - P: silent-on-rules-requiring-root
    - W: mismatched-override embedded-library
    - W: groff-message usr/share/man/man1/detex.1.gz 76: warning:
      can't find special character '..'
    - W: wrong-manual-section usr/share/man/man1/axohelp.1.gz:1 1 != 1.1
    - I: typo-in-manual-page usr/share/man/man1/dvi2tty.1.gz
    - Override "W: no-manual-page"
      + in case the page is provided from a different package
      + page can only be found using apropos
    - Override
      "I: texlive-binaries: spare-manual-page usr/share/man/man1/cweb.1.gz"

 -- Hilmar Preusse <hille42@web.de>  Wed, 23 Sep 2020 23:38:34 +0200

texlive-bin (2020.20200327.54578-4) unstable; urgency=medium

  * Add Conflict w/ texlive-luatex (<< 2020.20200329).
    (Closes: #956884)
  * Avoid massive parallel builds on powerpc, ppc64, sparc64. Limit
    to -j8 (2nd try). This hopefully (Closes: #956605).

 -- Hilmar Preusse <hille42@web.de>  Sat, 18 Apr 2020 07:38:25 +0200

texlive-bin (2020.20200327.54578-3) unstable; urgency=medium

  * Add Conflict w/ texlive-extra-utils (<< 2020.20200329).
    (Closes: #956587)
  * Avoid massive parallel builds on powerpc, ppc64, sparc64. Limit
    to -j8. This hopefully Closes: #956605 .

 -- Hilmar Preusse <hille42@web.de>  Wed, 15 Apr 2020 21:38:34 +0200

# For older changelog entries, run 'apt-get changelog libkpathsea6'
