Bug 657697

Summary: pdfmerge ceased to work because ps2pdf has changed (see #657694)
Product: [Fedora] Fedora Reporter: Knut Omang <knuto>
Component: pdfmergeAssignee: Dominic Hopf <dmaphy>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 14CC: metherid, oget.fedora
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-12-11 17:36:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Workaround to automatically accept files in the current directory as safe for ps2pdf none

Description Knut Omang 2010-11-27 12:13:33 UTC
Description of problem:
   pdfmerge relies on the postscript run primitive which is potentially dangerous 
   if applied to untrusted files. The latest version(s?) of ghostscript has a 
   ps2pdf script that automatically adds -dSAFER - this causes  

Version-Release number of selected component (if applicable):
   pdfmerge-1.0-4.fc12.noarch

How reproducible:

   pdfmerge file1.pdf file2.pdf output.pdf

  
Actual results:

   Any pdf files will fail.

Expected results:
   output.pdf should contain the concatenation of file1.pdf and file2.pdf

Additional info:

   Attached patch requires the patch in #657694 to have any effect.

Comment 1 Knut Omang 2010-11-29 15:33:44 UTC
Created attachment 463513 [details]
Workaround to automatically accept files in the current directory as safe for ps2pdf

Comment 2 Knut Omang 2010-11-29 15:39:49 UTC
Since 657694 got rejected, here is a second, partial solution to the problem
that does not require any changes to ps2pdf but will only work for files in the current directory. 

In addition I added a few lines to reduce some frustration for users in the help text.

Comment 3 Fedora Admin XMLRPC Client 2010-12-09 22:38:33 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 4 Dominic Hopf 2010-12-10 00:23:29 UTC
Hi Knut,

since the upstream project seems pretty dead (last release on SourceForge was 2004) I'm going to continue this project upstream and also continue the packaging for Fedora. I already applied your patch upstream: https://github.com/dmaphy/pdfmerge

Thanks very much for your efforts on this :)

Comment 5 Knut Omang 2010-12-10 07:25:20 UTC
Well, thank you for taking the responsibility for this :) 
it is a very useful utility as it is a "missing link" in that many programs are able to read, create and process PDF files but one often ends up with multiple smaller files as output. It is also quite elegant in it's simplicity, given the not trivial knowledge of postscript and pdf required.

Comment 6 Dominic Hopf 2010-12-11 17:36:15 UTC
Hi Knut, since this bug refers to the same topic as #642427, I'll close this one as duplicate. A fix is already available in koji: http://koji.fedoraproject.org/koji/packageinfo?packageID=6563 :)

*** This bug has been marked as a duplicate of bug 642427 ***