[tldistro] List of CVEs/bugs for TeX Live

[Norbert Preining]

Hi Edd,

> I was wondering if there is a list of CVEs/bugs (with patches) that
> upstream distros should be apply to packages.

The best there is is the tl2018 branch which contains those fixes.
There is no separate list.

> I'm aware of the 'known issues' page on the TeX Live website, but it
> doesn't seem to list security issues (or there were none?).

There was one and it is fixed in the tl2018 branch, see either svn or 
git.

Best

Norbert

--
PREINING Norbert                               http://www.preining.info
Accelia Inc.     +    JAIST     +    TeX Live     +    Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13