apply fix for context mtxrun.lua (bz2279243), add versioned Fedora banner

texlive-base.spec

@@ -25,7 +25,7 @@
 
 Name: %{shortname}-base
 Version: %{source_date}
-Release: 77%{?dist}
+Release: 78%{?dist}
 Epoch: 11
 Summary: TeX formatting system
 # The only files in the base package are directories, cache, and license texts
@@ -8379,7 +8379,7 @@ export XPDF_LIBS="-lxpdfcore -lfofi -lgoo -lsplash $GLIB_LIBS $PAPER_LIBS $FONTC
 --with-system-gd --with-system-t1lib --with-system-teckit --with-system-freetype2 --with-system-zziplib \
 --with-system-cairo --with-system-icu --with-system-harfbuzz --with-system-graphite2 --with-system-libgs --with-system-pixman \
 --with-system-libpaper --with-system-potrace --with-pic --with-xdvi-x-toolkit=xaw --with-system-mpfr --with-system-gmp \
---enable-shared --enable-compiler-warnings=max --without-cxx-runtime-hack \
+--enable-shared --enable-compiler-warnings=max --without-cxx-runtime-hack --with-banner-add="/Fedora %{fedora}" \
 --disable-native-texlive-build --disable-t1utils --enable-psutils --disable-biber --disable-ptexenc --disable-largefile \
 %if %{with poppler}
 --with-system-poppler --with-system-xpdf \
@@ -8517,6 +8517,12 @@ patch -p1 < %{_sourcedir}/texlive-base-20230311-fix-scripts.patch
 
 popd
 
+# Fix context for CVE-2023-32700
+# NOTE: this is not needed with texlive 2024+
+pushd %{buildroot}%{_texdir}/texmf-dist/
+sed -i 's/%primaryflags%/%primaryflags% --socket --shell-escape/' scripts/context/lua/mtxrun.lua
+popd
+
 # config files in /etc symlinked
 mkdir -p %{buildroot}%{_sysconfdir}/texlive/web2c
 mkdir -p %{buildroot}%{_sysconfdir}/texlive/dvips/config
@@ -11109,6 +11115,10 @@ yes | %{_bindir}/updmap-sys --quiet --syncwithtrees >/dev/null 2>&1 || :
 %doc %{_texdir}/texmf-dist/doc/latex/yplan/
 
 %changelog
+* Mon May  6 2024 Tom Callaway <spot@fedoraproject.org> - 11:20230311-78
+- apply fix for context mtxrun.lua (bz2279243)
+- add versioned Fedora banner
+
 * Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 11:20230311-77
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild