--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package docx2txt
[ Reason ]
Address security issue: do not quote %s in mailcap entry.
See: https://bugs.debian.org/985594
[ Impact ]
Potential security issue with crafted filename.
[ Tests ]
n/a
[ Risks ]
- Code is trivial.
- Leaf package.
[ Checklist ]
[X] all changes are documented in the d/changelog
[X] I reviewed all changes and I approve them
[X] attach debdiff against the package in testing
[ Other info ]
It's a two-character change.
unblock docx2txt/1.4-5
diff -Nru docx2txt-1.4/debian/changelog docx2txt-1.4/debian/changelog
--- docx2txt-1.4/debian/changelog 2020-12-11 21:56:27.000000000 +0000
+++ docx2txt-1.4/debian/changelog 2021-03-20 17:13:44.000000000 +0000
@@ -1,3 +1,9 @@
+docx2txt (1.4-5) unstable; urgency=medium
+
+ * Address security issue: do not quote %s in mailcap entry (closes: #985594)
+
+ -- Barak A. Pearlmutter <bap@debian.org> Sat, 20 Mar 2021 17:13:44 +0000
+
docx2txt (1.4-4) unstable; urgency=medium
* debian/rules does not require root
diff -Nru docx2txt-1.4/debian/docx2txt.mime docx2txt-1.4/debian/docx2txt.mime
--- docx2txt-1.4/debian/docx2txt.mime 2020-12-11 21:55:16.000000000 +0000
+++ docx2txt-1.4/debian/docx2txt.mime 2021-03-20 17:12:47.000000000 +0000
@@ -1 +1 @@
-application/vnd.openxmlformats-officedocument.wordprocessingml.document; docx2txt '%s' - ; copiousoutput; description=Office Open XML Document
+application/vnd.openxmlformats-officedocument.wordprocessingml.document; docx2txt %s - ; copiousoutput; description=Office Open XML Document
--- End Message ---