Package: xpdf Version: 3.02-15 Severity: normal
The new xpdf script fails to properly protect its arguments when calling xpdf.real. In particular, when called with '-ps "|command"', cmd="$cmd $1 $2" becomes cmd="xpdf.real -ps |command" which, when eval'd, pipes xpdf.real -ps into command. It should be cmd="xpdf.real -ps '|command'" or equivalent. Bill -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.37-2-686 (SMP w/2 CPU cores) Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages xpdf depends on: ii lesstif2 1:0.95.2-1 OSF/Motif 2.1 implementation relea ii libc6 2.13-10 Embedded GNU C Library: Shared lib ii libgcc1 1:4.6.1-2 GCC support library ii libpoppler5 0.12.4-1.2 PDF rendering library ii libstdc++6 4.6.1-2 GNU Standard C++ Library v3 ii libx11-6 2:1.4.3-2 X11 client-side library ii libxt6 1:1.1.1-2 X11 toolkit intrinsics library Versions of packages xpdf recommends: ii gsfonts-x11 0.22 Make Ghostscript fonts available t pn poppler-data <none> (no description available) pn poppler-utils <none> (no description available) xpdf suggests no packages. -- Configuration Files: /etc/xpdf/xpdfrc changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org