[tlbuild] patch for CVE-2010-0829

[George N. White III]

On Fri, Jun 11, 2010 at 11:24 AM, Edd Barrett <vext01 at gmail.com> wrote:

> On Fri, Jun 11, 2010 at 11:11:49PM +0900, Norbert Preining wrote:
>> On Fr, 11 Jun 2010, Edd Barrett wrote:
>> > How is dvipng used in texlive? Is it just supplied for the user to run directly?
>> >
>> > If I make a separate package for dvipng (and --disable-dvipng) and mark
>> > it as a dependency of texlive, will anything behave differently?
>>
>> This is wahat we are doing in Debian.
>
> How do you deal with texlive requiring dvipng and dvipng requiring kpse? Do you
> have a separate libkpse package also?

That is what Ubuntu has for texlive2007, called libkpathsea4.  There
are 40 packages
that depend on it (but the list has many "duplicates", so really more like 30).

It would be so boring if every distro used the same package names and
dependencies!

-- 
George N. White III <aa056 at chebucto.ns.ca>
Head of St. Margarets Bay, Nova Scotia