[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#615580: marked as done (Please add gnuplot to shell_escape_commands in texmf.cnf)

Your message dated Wed, 23 Mar 2011 14:59:32 +0900
with message-id <20110323055932.GA32627@gamma.logic.tuwien.ac.at>
and subject line Re: Bug#615580: Please add gnuplot to shell_escape_commands in texmf.cnf
has caused the Debian Bug report #615580,
regarding Please add gnuplot to shell_escape_commands in texmf.cnf
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
615580: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615580
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: tex-common
Version: 2.08
Severity: wishlist

Please consider adding gnuplot to the list of allowed
shell_escape_commands in the default texmf.cnf, as it can be used to
create plots with \pgfplotgnuplot from the pgf package.

--- End Message ---
--- Begin Message --- 
Hi Michael,

On So, 27 Feb 2011, Michael Goetze wrote:
> Please consider adding gnuplot to the list of allowed
> shell_escape_commands in the default texmf.cnf, as it can be used to
> create plots with \pgfplotgnuplot from the pgf package.

I didn't answer earlier because there was a CVE running (security
advisory) for that.

I am closing this bug now since we have completely disabled 
shell_escape_commands as it is a security risk. Admins can bythemselves
decide to edit the resp. config file in /etc/texmf/texmf.d and
add whatever program they trust.

It might be that with TL 2010 or TL2011 we are reintroducing this
for a very limited list of programs.

Best wishes

Norbert
------------------------------------------------------------------------
Norbert Preining            preining@{jaist.ac.jp, logic.at, debian.org}
JAIST, Japan                                 TeX Live & Debian Developer
DSA: 0x09C5B094   fp: 14DF 2E6C 0307 BE6D AD76  A9C0 D2BF 4AA3 09C5 B094
------------------------------------------------------------------------
GALASHIELS (pl.n.)
A form of particularly long sparse sideburns which are part of the
mandatory uniform of British Rail guards.
			--- Douglas Adams, The Meaning of Liff

--- End Message ---
Reply to: