[tlbuild] patch for CVE-2010-0829

[Norbert Preining]

On Fr, 11 Jun 2010, Edd Barrett wrote:
> How is dvipng used in texlive? Is it just supplied for the user to run directly?
> 
> If I make a separate package for dvipng (and --disable-dvipng) and mark
> it as a dependency of texlive, will anything behave differently?

This is wahat we are doing in Debian.

Best wishes

Norbert
------------------------------------------------------------------------
Norbert Preining            preining@{jaist.ac.jp, logic.at, debian.org}
JAIST, Japan                                 TeX Live & Debian Developer
DSA: 0x09C5B094   fp: 14DF 2E6C 0307 BE6D AD76  A9C0 D2BF 4AA3 09C5 B094
------------------------------------------------------------------------
TORONTO (n.) Generic term for anything which comes out of a gush
despite all your careful efforts to let it out gently, e.g. flour into
a white sauce, tomato ketchup on to fried fish, sperm into a human
being, etc.
			--- Douglas Adams, The Meaning of Liff