Security risks when invoking ghostscript

Giuseppe Sacco <[email protected]> Wed, 02 Jun 2010 22:49:14 +0200
Newsgroups gmane.comp.telephony.fax.hylafax.devel
Message-ID <1275511754.17826.5.camel@scarafaggio>
Hi all,
it seems ghostscript look for all files in current directory before
searching in its preferred path. This is its default behaviour. The way
to disable it, is to use option "-P-"[1]. There a few bug reports
signalling this problem, as for [2] (the latest one) and [3] (the first
one).

What is your opinion about this problem when gs is invoked by hylafax?
Is there any real risks?

Thanks,
Giuseppe

[1]http://svn.ghostscript.com/ghostscript/trunk/gs/doc/Use.htm#P-_switch
[2]http://bugs.ghostscript.com/show_bug.cgi?id=691350
[3]http://bugs.ghostscript.com/show_bug.cgi?id=691339


____________________ HylaFAX(tm) Developers Mailing List ____________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe [email protected] < /dev/null