Package: release.debian.org
Tags: jessie
User: release.debian.org@packages.debian.org
Usertag: pu
Control: submitter -1 Norbert Preining <preining@logic.at>
X-Debbugs-Cc: Norbert Preining <preining@logic.at>, debian-tex-maint@lists.debian.org, Osamu Aoki <osamu@debian.org>
Filing this properly.
On Wed, Aug 26, 2015 at 09:14:04 +0900, Norbert Preining wrote:
> Dear Release Team,
>
> I am proposing to update src:texlive-bin in Jessie to a new version.
> The version that was released unfortunately is completely broken
> when one tries to use Xe(La)TeX with Type1 fonts (this was a side-effect
> of switching from libfreetype to harfbuzz).
>
> One of the most prominent examples of a document that does this are
> the Debian release-notes.
>
> Building the release-notes on Jessie results in all letters shifted
> by one position, that is completely broken documents. See attachement 1,
> jessie-original.png as examples.
>
> Unfortunately, the fix for this problem has entered TeX Live upstream
> only very recently. For unstable I have fixed this with the recent
> upload of 2015.20150524.37493-6 which uses the released TeX Live 2015
> sources and includes the TeX Live subversion changes in the dvipdfm-x
> subdirectory.
>
> Fixing this in Jessie, which is based on older TeX Live sources,
> unfortunately cannot be done by patching, as there have been too
> many unrelated changes.
>
> Thus, I have prepared an updated packages that does the following:
> * keep the current Jessie sources as is
> * include a checkout/tar of the current TeX Live svn dvipdfmx-x
> directory which fixes the problem
> * on build, replace the buggy dvipdm-x directory with the fixed
> one from current TeX Live.
> Due to the highly modular build system of TeX Live, this procedure is
> safe.
>
> With these packages installed, building the release notes again works
> as expected, see attached screenshot 2, jessie-fixed.png.
>
> I am well aware that this is a big change, and that there is no diff
> that can be shown (well, I could make a diff between the current dvipdfm-x
> and the new one, but that will not help as it is too big).
>
> We have been discussing this extensively on the Debian TeX list,
> starting here: https://lists.debian.org/debian-tex-maint/2015/06/msg00159.html
> and Osamu Aoki (in Cc) supports the unconvential update
> (see https://lists.debian.org/debian-tex-maint/2015/06/msg00206.html)
>
> The updated packages (source and amd64) are available at
> deb http://people.debian.org/~preining/TeX/ jessie/
> deb-src http://people.debian.org/~preining/TeX/ jessie/
> or directly via
> dget http://people.debian.org/~preining/TeX/jessie/texlive-bin_2014.20140926.35254-7.dsc
> (all signed with my Debian key)
>
> I include the debdiff between the current source and the proposed
> updates (attachment 3). The changes are:
> * debian/control:
> add dependency on t1utils as t1disasm program is necessary
> for the new dvipdfm-x
> * debian/rules:
> add code to unpack the dvipdmfx tarball and undo the changes on clean
>
> Thanks for consideration
>
> Norbert
>
> ------------------------------------------------------------------------
> PREINING, Norbert http://www.preining.info
> JAIST, Japan TeX Live & Debian Developer
> GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
> ------------------------------------------------------------------------
> diff -Nru texlive-bin-2014.20140926.35254/debian/changelog texlive-bin-2014.20140926.35254/debian/changelog
> --- texlive-bin-2014.20140926.35254/debian/changelog 2015-01-19 00:04:33.000000000 +0900
> +++ texlive-bin-2014.20140926.35254/debian/changelog 2015-08-26 08:12:58.000000000 +0900
> @@ -1,3 +1,10 @@
> +texlive-bin (2014.20140926.35254-7) stable-proposed-updates; urgency=medium
> +
> + * update dvipdfmx to a version where Type1 font is fixed
> + * add t1utils (for t1disasm, needed by new dvipdfm*) to dependencies
> +
> + -- Norbert Preining <preining@debian.org> Wed, 26 Aug 2015 08:12:23 +0900
> +
> texlive-bin (2014.20140926.35254-6) unstable; urgency=high
>
> * cherrypick security fix for libpng CVE-2015-0973 (Closes: #775673)
> diff -Nru texlive-bin-2014.20140926.35254/debian/control texlive-bin-2014.20140926.35254/debian/control
> --- texlive-bin-2014.20140926.35254/debian/control 2015-01-19 00:04:33.000000000 +0900
> +++ texlive-bin-2014.20140926.35254/debian/control 2015-08-26 08:12:58.000000000 +0900
> @@ -11,7 +11,7 @@
>
> Package: texlive-binaries
> Architecture: any
> -Depends: libptexenc1 (>= ${source:Version}), libptexenc1 (<< ${source:Version}.1~), libkpathsea6 (>= ${source:Version}), libkpathsea6 (<< ${source:Version}.1~), ${shlibs:Depends}, ${misc:Depends}, tex-common (>= 5.02), perl, dpkg (>= 1.15.4) | install-info
> +Depends: libptexenc1 (>= ${source:Version}), libptexenc1 (<< ${source:Version}.1~), libkpathsea6 (>= ${source:Version}), libkpathsea6 (<< ${source:Version}.1~), ${shlibs:Depends}, ${misc:Depends}, tex-common (>= 5.02), t1utils, perl, dpkg (>= 1.15.4) | install-info
> Recommends: texlive-base, python, ruby, wish
> Replaces: texlive-metapost (<< 2010), texlive-base (<< 2010), ptex-bin, mendexk, jmpost, luatex (<< 2014)
> Conflicts: mendexk, makejvf, jmpost
> Binary files /tmp/0SFyclep7P/texlive-bin-2014.20140926.35254/debian/dvipdfmx-20150823.tar.gz and /tmp/NdrHJIJj8N/texlive-bin-2014.20140926.35254/debian/dvipdfmx-20150823.tar.gz differ
> diff -Nru texlive-bin-2014.20140926.35254/debian/gbp.conf texlive-bin-2014.20140926.35254/debian/gbp.conf
> --- texlive-bin-2014.20140926.35254/debian/gbp.conf 2015-01-19 00:04:33.000000000 +0900
> +++ texlive-bin-2014.20140926.35254/debian/gbp.conf 2015-08-26 08:12:58.000000000 +0900
> @@ -1,2 +1,3 @@
> [DEFAULT]
> tarball-dir = ../tarballs
> +debian-branch=jessie
> diff -Nru texlive-bin-2014.20140926.35254/debian/rules texlive-bin-2014.20140926.35254/debian/rules
> --- texlive-bin-2014.20140926.35254/debian/rules 2015-01-19 00:04:33.000000000 +0900
> +++ texlive-bin-2014.20140926.35254/debian/rules 2015-08-26 08:12:58.000000000 +0900
> @@ -65,8 +65,20 @@
> dh $@ --with autoreconf --builddirectory Work
>
> override_dh_autoreconf:
> + # dvipdfmx needs updating, as it is completely broken with
> + # respect to postscript type1 files
> + mv texk/dvipdfm-x texk/dvipfm-x.save
> + tar -xzf debian/dvipdfmx-20150823.tar.gz
> dh_autoreconf --as-needed
>
> +override_dh_autoreconf_clean:
> + # undo the dvipdfmx fixes
> + if [ -r texk/dvipdfm-x.save ] ; then \
> + rm -rf texk/dvipdfm-x ; \
> + mv texk/dvipdfm-x.save texk/dvipdfm-x ; \
> + fi
> + dh_autoreconf_clean
> +
> #
> # we need libpng >= 1.4 which is not available in unstable and
> # seems not to arrive anytime soon. We have to rebuild also
> diff -Nru texlive-bin-2014.20140926.35254/debian/source/include-binaries texlive-bin-2014.20140926.35254/debian/source/include-binaries
> --- texlive-bin-2014.20140926.35254/debian/source/include-binaries 1970-01-01 09:00:00.000000000 +0900
> +++ texlive-bin-2014.20140926.35254/debian/source/include-binaries 2015-08-26 08:12:58.000000000 +0900
> @@ -0,0 +1 @@
> +debian/dvipdfmx-20150823.tar.gz
Attachment:
signature.asc
Description: Digital signature