Problems found locating distfiles:
Package acroread7: missing distfile AdobeReader_enu-7.0.9-1.i386.tar.gz
Package acroread8: missing distfile AdobeReader_enu-8.1.7-1.sparc.tar.gz
Package cups-filters: missing distfile cups-filters-1.1.0.tar.xz
Package dvidvi: missing distfile dvidvi-1.0.tar.gz
Package lgrind: missing distfile lgrind.tar.bz2
Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden). All existing
SHA1 digests retained for now as an audit trail.
pdfTEX: Support JPEG Exif as well as JFIF; do not even emit a warning if
\pdfinclusionerrorlevel is negative; sync with xpdf 3.04.
LuaTEX: New library newtokenlib for scanning tokens; bug fixes in the normal
random number generator and other places.
XeTEX: Image handling fixes; xdvipdfmx binary looked for first as a sibling
to xetex; internal XDV opcodes changed.
MetaPost: New numbersystem binary; new Japanese-enabled upmpost and
updvitomp programs, analogous to up*tex.
Infrastructure: The fmtutil script has been reimplemented to read
fmtutil.cnf on a per-tree basis, analogous to updmap. Web2C mktex* scripts
(including mktexlsr, mktextfm, mktexpk) now prefer programs in their own
directory, instead of always using the existing PATH.
Changes:
* output.c (hvpos): recover the old code in hvpos() for japanese
because the changed code leads to incorrect result in some cases.
other cases than japanese are not affected.
* writet1.c (t1_check_unusual_charstring): new fn.
(t1_subset_charstrings): call it. This resolves a bug reported by
Knuth when there is a newline between the /CharStrings and the
following number (dict size).
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX
Live 2009 and earlier, and teTeX, allow remote attackers to cause a
denial of service (application crash) or possibly execute arbitrary
code via a special command in a DVI file, related to the (1)
predospecial and (2) bbdospecial functions, a different
vulnerability than CVE-2010-0739.
Major changes:
* dvips.texi (Configuration file commands): document -G,
including its obsolesence.
* Master/texmf/dvips/tetex/config.pdf: remove the G setting,
now actively problematic.
dvips takes a DVI file file[.dvi] produced by TeX (or by some other
processor such as GFtoDVI) and converts it to PostScript, normally
sending the result directly to the (laser)printer. The DVI file may
be specified without the .dvi extension. Fonts used may either be
resident in the printer or defined as bitmaps in PK files, or a
`virtual' combination of both. If the mktexpk program is installed,
either be resident in the printer or defined as bitmaps in PK files,
or a `virtual' combination of both. If the mktexpk program is
installed, dvips will automatically invoke METAFONT to generate fonts
that don't already exist.
