From 95b83a3e8b04c415605f533a5bce1e3cbb319a60 Mon Sep 17 00:00:00 2001 From: Thomas Deutschmann Date: Mon, 7 Oct 2019 02:14:06 +0200 Subject: [PATCH 1/4] Make sure 'dvipdf' is being run securely Signed-off-by: Thomas Deutschmann Signed-off-by: Sam James --- lib/dvipdf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/dvipdf b/lib/dvipdf index 13e19854..078292b4 100755 --- a/lib/dvipdf +++ b/lib/dvipdf @@ -43,4 +43,4 @@ fi # We have to include the options twice because -I only takes effect if it # appears before other options. -exec dvips -Ppdf $DVIPSOPTIONS -q -f "$infile" | $GS_EXECUTABLE $OPTIONS -q -P- -dSAFER -dNOPAUSE -dBATCH -sDEVICE=pdfwrite -sstdout=%stderr -sOutputFile="$outfile" $OPTIONS - +exec dvips -R -Ppdf $DVIPSOPTIONS -q -f "$infile" | $GS_EXECUTABLE $OPTIONS -q -P- -dSAFER -dNOPAUSE -dBATCH -sDEVICE=pdfwrite -sstdout=%stderr -sOutputFile="$outfile" $OPTIONS - -- 2.55.0