texlive security update

CentOS Errata and Security Advisory CESA-2020:1036

The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.

Security Fix(es):

• texlive: Buffer overflow in t1_check_unusual_charstring function in writet1.c (CVE-2018-17407)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2020-April/032693.html

Affected packages:
texlive
texlive-adjustbox
texlive-adjustbox-doc
texlive-ae
texlive-ae-doc
texlive-algorithms
texlive-algorithms-doc
texlive-amscls
texlive-amscls-doc
texlive-amsfonts
texlive-amsfonts-doc
texlive-amsmath
texlive-amsmath-doc
texlive-anysize
texlive-anysize-doc
texlive-appendix
texlive-appendix-doc
texlive-arabxetex
texlive-arabxetex-doc
texlive-arphic
texlive-arphic-doc
texlive-attachfile
texlive-attachfile-doc
texlive-avantgar
texlive-babel
texlive-babel-doc
texlive-babelbib
texlive-babelbib-doc
texlive-base
texlive-beamer
texlive-beamer-doc
texlive-bera
texlive-bera-doc
texlive-beton
texlive-beton-doc
texlive-bibtex
texlive-bibtex-bin
texlive-bibtex-doc
texlive-bibtopic
texlive-bibtopic-doc
texlive-bidi
texlive-bidi-doc
texlive-bigfoot
texlive-bigfoot-doc
texlive-bookman
texlive-booktabs
texlive-booktabs-doc
texlive-breakurl
texlive-breakurl-doc
texlive-caption
texlive-caption-doc
texlive-carlisle
texlive-carlisle-doc
texlive-changebar
texlive-changebar-doc
texlive-changepage
texlive-changepage-doc
texlive-charter
texlive-charter-doc
texlive-chngcntr
texlive-chngcntr-doc
texlive-cite
texlive-cite-doc
texlive-cjk
texlive-cjk-doc
texlive-cm
texlive-cm-doc
texlive-cm-lgc
texlive-cm-lgc-doc
texlive-cm-super
texlive-cm-super-doc
texlive-cmap
texlive-cmap-doc
texlive-cmextra
texlive-cns
texlive-cns-doc
texlive-collectbox
texlive-collectbox-doc
texlive-collection-basic
texlive-collection-documentation-base
texlive-collection-fontsrecommended
texlive-collection-htmlxml
texlive-collection-latex
texlive-collection-latexrecommended
texlive-collection-xetex
texlive-colortbl
texlive-colortbl-doc
texlive-courier
texlive-crop
texlive-crop-doc
texlive-csquotes
texlive-csquotes-doc
texlive-ctable
texlive-ctable-doc
texlive-currfile
texlive-currfile-doc
texlive-datetime
texlive-datetime-doc
texlive-dvipdfm
texlive-dvipdfm-bin
texlive-dvipdfm-doc
texlive-dvipdfmx
texlive-dvipdfmx-bin
texlive-dvipdfmx-def
texlive-dvipdfmx-doc
texlive-dvipng
texlive-dvipng-bin
texlive-dvipng-doc
texlive-dvips
texlive-dvips-bin
texlive-dvips-doc
texlive-ec
texlive-ec-doc
texlive-eepic
texlive-eepic-doc
texlive-enctex
texlive-enctex-doc
texlive-enumitem
texlive-enumitem-doc
texlive-epsf
texlive-epsf-doc
texlive-epstopdf
texlive-epstopdf-bin
texlive-epstopdf-doc
texlive-eso-pic
texlive-eso-pic-doc
texlive-etex
texlive-etex-doc
texlive-etex-pkg
texlive-etex-pkg-doc
texlive-etoolbox
texlive-etoolbox-doc
texlive-euenc
texlive-euenc-doc
texlive-euler
texlive-euler-doc
texlive-euro
texlive-euro-doc
texlive-eurosym
texlive-eurosym-doc
texlive-extsizes
texlive-extsizes-doc
texlive-fancybox
texlive-fancybox-doc
texlive-fancyhdr
texlive-fancyhdr-doc
texlive-fancyref
texlive-fancyref-doc
texlive-fancyvrb
texlive-fancyvrb-doc
texlive-filecontents
texlive-filecontents-doc
texlive-filehook
texlive-filehook-doc
texlive-fix2col
texlive-fix2col-doc
texlive-fixlatvian
texlive-fixlatvian-doc
texlive-float
texlive-float-doc
texlive-fmtcount
texlive-fmtcount-doc
texlive-fncychap
texlive-fncychap-doc
texlive-fontbook
texlive-fontbook-doc
texlive-fontspec
texlive-fontspec-doc
texlive-fontware
texlive-fontware-bin
texlive-fontwrap
texlive-fontwrap-doc
texlive-footmisc
texlive-footmisc-doc
texlive-fp
texlive-fp-doc
texlive-fpl
texlive-fpl-doc
texlive-framed
texlive-framed-doc
texlive-garuda-c90
texlive-geometry
texlive-geometry-doc
texlive-glyphlist
texlive-graphics
texlive-graphics-doc
texlive-gsftopk
texlive-gsftopk-bin
texlive-helvetic
texlive-hyperref
texlive-hyperref-doc
texlive-hyph-utf8
texlive-hyph-utf8-doc
texlive-hyphen-base
texlive-hyphenat
texlive-hyphenat-doc
texlive-ifetex
texlive-ifetex-doc
texlive-ifluatex
texlive-ifluatex-doc
texlive-ifmtarg
texlive-ifmtarg-doc
texlive-ifoddpage
texlive-ifoddpage-doc
texlive-iftex
texlive-iftex-doc
texlive-ifxetex
texlive-ifxetex-doc
texlive-index
texlive-index-doc
texlive-jadetex
texlive-jadetex-bin
texlive-jadetex-doc
texlive-jknapltx
texlive-jknapltx-doc
texlive-kastrup
texlive-kastrup-doc
texlive-kerkis
texlive-kerkis-doc
texlive-koma-script
texlive-kpathsea
texlive-kpathsea-bin
texlive-kpathsea-doc
texlive-kpathsea-lib
texlive-kpathsea-lib-devel
texlive-l3experimental
texlive-l3experimental-doc
texlive-l3kernel
texlive-l3kernel-doc
texlive-l3packages
texlive-l3packages-doc
texlive-lastpage
texlive-lastpage-doc
texlive-latex
texlive-latex-bin
texlive-latex-bin-bin
texlive-latex-doc
texlive-latex-fonts
texlive-latex-fonts-doc
texlive-latexconfig
texlive-lettrine
texlive-lettrine-doc
texlive-listings
texlive-listings-doc
texlive-lm
texlive-lm-doc
texlive-lm-math
texlive-lm-math-doc
texlive-ltxmisc
texlive-lua-alt-getopt
texlive-lua-alt-getopt-doc
texlive-lualatex-math
texlive-lualatex-math-doc
texlive-luaotfload
texlive-luaotfload-bin
texlive-luaotfload-doc
texlive-luatex
texlive-luatex-bin
texlive-luatex-doc
texlive-luatexbase
texlive-luatexbase-doc
texlive-makecmds
texlive-makecmds-doc
texlive-makeindex
texlive-makeindex-bin
texlive-makeindex-doc
texlive-marginnote
texlive-marginnote-doc
texlive-marvosym
texlive-marvosym-doc
texlive-mathpazo
texlive-mathpazo-doc
texlive-mathspec
texlive-mathspec-doc
texlive-mdwtools
texlive-mdwtools-doc
texlive-memoir
texlive-memoir-doc
texlive-metafont
texlive-metafont-bin
texlive-metalogo
texlive-metalogo-doc
texlive-metapost
texlive-metapost-bin
texlive-metapost-doc
texlive-metapost-examples-doc
texlive-mflogo
texlive-mflogo-doc
texlive-mfnfss
texlive-mfnfss-doc
texlive-mfware
texlive-mfware-bin
texlive-mh
texlive-mh-doc
texlive-microtype
texlive-microtype-doc
texlive-misc
texlive-mnsymbol
texlive-mnsymbol-doc
texlive-mparhack
texlive-mparhack-doc
texlive-mptopdf
texlive-mptopdf-bin
texlive-ms
texlive-ms-doc
texlive-multido
texlive-multido-doc
texlive-multirow
texlive-multirow-doc
texlive-natbib
texlive-natbib-doc
texlive-ncctools
texlive-ncctools-doc
texlive-ncntrsbk
texlive-norasi-c90
texlive-ntgclass
texlive-ntgclass-doc
texlive-oberdiek
texlive-oberdiek-doc
texlive-overpic
texlive-overpic-doc
texlive-palatino
texlive-paralist
texlive-paralist-doc
texlive-parallel
texlive-parallel-doc
texlive-parskip
texlive-parskip-doc
texlive-passivetex
texlive-pdfpages
texlive-pdfpages-doc
texlive-pdftex
texlive-pdftex-bin
texlive-pdftex-def
texlive-pdftex-doc
texlive-pgf
texlive-pgf-doc
texlive-philokalia
texlive-philokalia-doc
texlive-placeins
texlive-placeins-doc
texlive-plain
texlive-polyglossia
texlive-polyglossia-doc
texlive-powerdot
texlive-powerdot-doc
texlive-preprint
texlive-preprint-doc
texlive-psfrag
texlive-psfrag-doc
texlive-pslatex
texlive-psnfss
texlive-psnfss-doc
texlive-pspicture
texlive-pspicture-doc
texlive-pst-3d
texlive-pst-3d-doc
texlive-pst-blur
texlive-pst-blur-doc
texlive-pst-coil
texlive-pst-coil-doc
texlive-pst-eps
texlive-pst-eps-doc
texlive-pst-fill
texlive-pst-fill-doc
texlive-pst-grad
texlive-pst-grad-doc
texlive-pst-math
texlive-pst-math-doc
texlive-pst-node
texlive-pst-node-doc
texlive-pst-plot
texlive-pst-plot-doc
texlive-pst-slpe
texlive-pst-slpe-doc
texlive-pst-text
texlive-pst-text-doc
texlive-pst-tree
texlive-pst-tree-doc
texlive-pstricks
texlive-pstricks-add
texlive-pstricks-add-doc
texlive-pstricks-doc
texlive-ptext
texlive-ptext-doc
texlive-pxfonts
texlive-pxfonts-doc
texlive-qstest
texlive-qstest-doc
texlive-rcs
texlive-rcs-doc
texlive-realscripts
texlive-realscripts-doc
texlive-rotating
texlive-rotating-doc
texlive-rsfs
texlive-rsfs-doc
texlive-sansmath
texlive-sansmath-doc
texlive-sauerj
texlive-sauerj-doc
texlive-scheme-basic
texlive-section
texlive-section-doc
texlive-sectsty
texlive-sectsty-doc
texlive-seminar
texlive-seminar-doc
texlive-sepnum
texlive-sepnum-doc
texlive-setspace
texlive-setspace-doc
texlive-showexpl
texlive-showexpl-doc
texlive-soul
texlive-soul-doc
texlive-stmaryrd
texlive-stmaryrd-doc
texlive-subfig
texlive-subfig-doc
texlive-subfigure
texlive-subfigure-doc
texlive-svn-prov
texlive-svn-prov-doc
texlive-symbol
texlive-t2
texlive-t2-doc
texlive-tetex
texlive-tetex-bin
texlive-tetex-doc
texlive-tex
texlive-tex-bin
texlive-tex-gyre
texlive-tex-gyre-doc
texlive-tex-gyre-math
texlive-tex-gyre-math-doc
texlive-tex4ht
texlive-tex4ht-bin
texlive-tex4ht-doc
texlive-texconfig
texlive-texconfig-bin
texlive-texlive.infra
texlive-texlive.infra-bin
texlive-texlive.infra-doc
texlive-textcase
texlive-textcase-doc
texlive-textpos
texlive-textpos-doc
texlive-thailatex
texlive-thailatex-doc
texlive-threeparttable
texlive-threeparttable-doc
texlive-thumbpdf
texlive-thumbpdf-bin
texlive-thumbpdf-doc
texlive-times
texlive-tipa
texlive-tipa-doc
texlive-titlesec
texlive-titlesec-doc
texlive-titling
texlive-titling-doc
texlive-tocloft
texlive-tocloft-doc
texlive-tools
texlive-tools-doc
texlive-txfonts
texlive-txfonts-doc
texlive-type1cm
texlive-type1cm-doc
texlive-typehtml
texlive-typehtml-doc
texlive-ucharclasses
texlive-ucharclasses-doc
texlive-ucs
texlive-ucs-doc
texlive-uhc
texlive-uhc-doc
texlive-ulem
texlive-ulem-doc
texlive-underscore
texlive-underscore-doc
texlive-unicode-math
texlive-unicode-math-doc
texlive-unisugar
texlive-unisugar-doc
texlive-url
texlive-url-doc
texlive-utopia
texlive-utopia-doc
texlive-varwidth
texlive-varwidth-doc
texlive-wadalab
texlive-wadalab-doc
texlive-was
texlive-was-doc
texlive-wasy
texlive-wasy-doc
texlive-wasysym
texlive-wasysym-doc
texlive-wrapfig
texlive-wrapfig-doc
texlive-xcolor
texlive-xcolor-doc
texlive-xdvi
texlive-xdvi-bin
texlive-xecjk
texlive-xecjk-doc
texlive-xecolor
texlive-xecolor-doc
texlive-xecyr
texlive-xecyr-doc
texlive-xeindex
texlive-xeindex-doc
texlive-xepersian
texlive-xepersian-doc
texlive-xesearch
texlive-xesearch-doc
texlive-xetex
texlive-xetex-bin
texlive-xetex-def
texlive-xetex-doc
texlive-xetex-itrans
texlive-xetex-itrans-doc
texlive-xetex-pstricks
texlive-xetex-pstricks-doc
texlive-xetex-tibetan
texlive-xetex-tibetan-doc
texlive-xetexconfig
texlive-xetexfontinfo
texlive-xetexfontinfo-doc
texlive-xifthen
texlive-xifthen-doc
texlive-xkeyval
texlive-xkeyval-doc
texlive-xltxtra
texlive-xltxtra-doc
texlive-xmltex
texlive-xmltex-bin
texlive-xmltex-doc
texlive-xstring
texlive-xstring-doc
texlive-xtab
texlive-xtab-doc
texlive-xunicode
texlive-xunicode-doc
texlive-zapfchan
texlive-zapfding

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:1036