DSA-2198-1 tex-common - insufficient input sanitizing

Bulletin has no description...