[bug #55557] [PATCH] gropdf, gpinyin, gperl, glilypond, hyphenex can execute arbitrary commands

Update of bug #7 (project groff): Category:None => General ___ Reply to this item at: ___

[bug #55557] [PATCH] gropdf, gpinyin, gperl, glilypond, hyphenex can execute arbitrary commands

Update of bug #7 (project groff): Category: Device gropdf => None Status: Confirmed => Fixed Assigned to:deri => gbranden Open/Closed:

[bug #55557] [PATCH] gropdf, gpinyin, gperl, glilypond, hyphenex can execute arbitrary commands

Follow-up Comment #6, bug #7 (project groff): No objection here, so long as the patch to gropdf is excluded, for the reasons given in #4. ___ Reply to this item at:

[bug #55557] [PATCH] gropdf, gpinyin, gperl, glilypond, hyphenex can execute arbitrary commands

Follow-up Comment #5, bug #7 (project groff): I propose we go ahead and incorporate Colin Watson's patch to his Debian package, which he's had in place for almost 2 years. Do we need smoke test regressions for the affected programs? If there's a concrete objection to it, can this bug please

[bug #55557] [PATCH] gropdf, gpinyin, gperl, glilypond, hyphenex can execute arbitrary commands

Follow-up Comment #4, bug #7 (project groff): Commit 2fc912f0751320a1fba0094dded38e2df46d1dbe fixed this for gropdf. I remember finding a case where the patch caused a problem with multiple input files. ___ Reply to this item at:

[bug #55557] [PATCH] gropdf, gpinyin, gperl, glilypond, hyphenex can execute arbitrary commands

Update of bug #7 (project groff): Severity: 4 - Important => 6 - Security Summary: [PATCH] gropdf can execute arbitrary commands => [PATCH] gropdf,gpinyin,gperl,glilypond,hyphenex can execute arbitrary commands