Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 172901 - [new ebuild] dev-tex/mimetex (a TeX preview generator for html/SS pages)
Summary: [new ebuild] dev-tex/mimetex (a TeX preview generator for html/SS pages)
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: x86 Linux
: High enhancement (vote)
Assignee: Default Assignee for New Packages
URL: http://www.forkosh.dreamhost.com/mime...
Whiteboard:
Keywords: EBUILD
Depends on:
Blocks:
 
Reported: 2007-03-31 16:47 UTC by Federico Ferri (RETIRED)
Modified: 2020-03-07 15:46 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
dev-tex/mimetex/mimetex-20070331.ebuild (mimetex-20070331.ebuild,586 bytes, text/plain)
2007-03-31 16:49 UTC, Federico Ferri (RETIRED)
Details
dev-tex/mimetex/mimetex-20070331.ebuild (mimetex-20070331.ebuild,619 bytes, text/plain)
2007-03-31 19:11 UTC, Federico Ferri (RETIRED)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Federico Ferri (RETIRED) gentoo-dev 2007-03-31 16:47:54 UTC
MimeTeX, licensed under the gpl, lets you easily embed LaTeX math in your html pages.  It parses a LaTeX math expression and immediately emits the corresponding gif image, rather than the usual TeX dvi. And mimeTeX is an entirely separate little program that doesn't use TeX or its fonts in any way. It's just one cgi that you put in your site's cgi-bin/ directory, with no other dependencies. So mimeTeX is very easy to install. And it's equally easy to use. Just place an html <img> tag in your document wherever you want to see the corresponding LaTeX expression. For example,

<img src="../cgi-bin/mimetex.cgi?f(x)=\int_{-\infty}^xe^{-t^2}dt"
 alt="" border=0 align=middle>

immediately generates the corresponding gif image on-the-fly. MimeTeX doesn't need intermediate dvi-to-gif conversion, and it doesn't create separate gif files for each converted expression. (But if you want image caching, see mimeTeX's   -DCACHEPATH=\"path/\"   compile option.) 

Reproducible: Always
Comment 1 Federico Ferri (RETIRED) gentoo-dev 2007-03-31 16:49:29 UTC
Created attachment 115063 [details]
dev-tex/mimetex/mimetex-20070331.ebuild
Comment 2 Federico Ferri (RETIRED) gentoo-dev 2007-03-31 19:11:36 UTC
Created attachment 115076 [details]
dev-tex/mimetex/mimetex-20070331.ebuild

Changed `gcc` to $(tc-getCC) as a developer suggested
Comment 3 Federico Ferri (RETIRED) gentoo-dev 2007-08-20 11:39:43 UTC
in sunrise overlay
Comment 4 Alex Legler (RETIRED) archtester gentoo-dev Security 2009-07-15 19:17:19 UTC
There has been a vulnerability report for mimetex:

 ================================================================================
Name:      CVE-2009-1382
URL:       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1382
Published: 2009-07-14
Severity:  High
Description: 

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when
downloaded before 20090713, allow remote attackers to execute arbitrary
code via a TeX file with long (1) picture, (2) circle, or (3) input
tags.

Please consider fixing this issue in sunrise. Note that the Security Team requires this issue to be fixed before the package can enter the official Portage tree. Thanks.
Comment 5 Alex Legler (RETIRED) archtester gentoo-dev Security 2009-07-15 19:21:01 UTC
Another vulnerability:

================================================================================
Name:      CVE-2009-2459
URL:       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2459
Published: 2009-07-14
Severity:  High
Description: 

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before
20090713, have unknown impact and attack vectors related to the (1)
\environ, (2) \input, and (3) \counter TeX directives.
Comment 6 Federico Ferri (RETIRED) gentoo-dev 2009-07-15 20:42:31 UTC
the person that is mirroring mimetex sources for gentoo (tommy?) should take care of this
Comment 7 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2010-07-08 13:56:19 UTC
The mirrored tarball SRC_URI is no longer valid. Is anyone interested in mirroring the tarball once again or should I mask it for removal?
Comment 8 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2010-08-08 18:44:52 UTC
The package has been removed from the Sunrise overlay.