@@ -11358,11 +11358,16 @@ let
1135811358 url = "mirror://cpan/authors/id/B/BR/BRMILLER/${pname}-${version}.tar.gz";
1135911359 sha256 = "1ccvdq7asxq6iw8x8ihwf5xs2mp7fkwm467xy7g8spkznr8wcacm";
1136011360 };
11361+ patches = [
11362+ (fetchpatch {
11363+ # https://github.com/brucemiller/LaTeXML/issues/1669
11364+ name = "downgrade-security-FileTemp.patch";
11365+ url = "https://github.com/brucemiller/LaTeXML/commit/c3d6b9b88f9eafce6eee52b1634ea33085ba9ec6.patch";
11366+ sha256 = "12w6nfv0bkj2mr4xwcqzkdngrpbq4fn52n85r9njdg913cvfirm7";
11367+ })
11368+ ];
1136111369 outputs = [ "out" "tex" ];
1136211370 propagatedBuildInputs = [ ArchiveZip DBFile FileWhich IOString ImageMagick ImageSize JSONXS LWP ParseRecDescent PodParser TextUnidecode XMLLibXSLT ];
11363− preCheck = ''
11364− rm t/931_epub.t # https://github.com/brucemiller/LaTeXML/issues/1669
11365− '';
1136611371 nativeBuildInputs = [ pkgs.makeWrapper ] ++ lib.optional stdenv.isDarwin shortenPerlShebang;
1136711372 makeMakerFlags = "TEXMF=\${tex} NOMKTEXLSR";
1136811373 # shebangs need to be patched before executables are copied to $out