Security risks when invoking ghostscript
Giuseppe Sacco <[email protected]> Wed, 02 Jun 2010 22:49:14 +0200
| Newsgroups | gmane.comp.telephony.fax.hylafax.devel |
|---|---|
| Message-ID | <1275511754.17826.5.camel@scarafaggio> |
Hi all, it seems ghostscript look for all files in current directory before searching in its preferred path. This is its default behaviour. The way to disable it, is to use option "-P-"[1]. There a few bug reports signalling this problem, as for [2] (the latest one) and [3] (the first one). What is your opinion about this problem when gs is invoked by hylafax? Is there any real risks? Thanks, Giuseppe [1]http://svn.ghostscript.com/ghostscript/trunk/gs/doc/Use.htm#P-_switch [2]http://bugs.ghostscript.com/show_bug.cgi?id=691350 [3]http://bugs.ghostscript.com/show_bug.cgi?id=691339 ____________________ HylaFAX(tm) Developers Mailing List ____________________ To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi On UNIX: mail -s unsubscribe [email protected] < /dev/null