--- texlive.orig.spec 2010-05-07 00:27:05.000000000 -0400 +++ texlive.spec 2010-05-07 00:40:09.000000000 -0400 @@ -21,7 +21,7 @@ Name: texlive Version: %{texlive_ver} -Release: 46%{?dist} +Release: 46.scripts.%{scriptsversion}%{?dist} Summary: Binaries for the TeX formatting system Group: Applications/Publishing @@ -126,6 +126,9 @@ Patch1006: texlive-2007-ptex-3.1.10.patch Patch1007: texlive-2007-fmtutil-ptex.patch +# 2000-: Scripts patches +Patch2000: texlive-CVE-2010-1440.patch + BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: flex bison ed xdg-utils @@ -431,6 +434,8 @@ %patch1007 -p1 -b .ptex +%patch2000 -p1 -b .CVE-2010-1440 + %if %{disable_lcdf_typetools} pushd utils rm -rf lcdf-typetools @@ -1238,6 +1243,10 @@ %{_mandir}/man1/texutil.1* %changelog +* Fri May 07 2010 Alex Dehnert 2007-46.scripts +- add patch for Bug 586819 - (CVE-2010-1440) from + https://bugzilla.redhat.com/attachment.cgi?id=410148 + * Fri Oct 23 2009 Jindrich Novy 2007-46 - add missing dependency on kpathsea