rendered paste body[ganesh:~/sword-1.5.9]% diff -r sword-1.5.9-7.1 sword-1.5.9-8
diff -uNr -r sword-1.5.9-7.1/debian/changelog sword-1.5.9-8/debian/changelog
--- sword-1.5.9-7.1/debian/changelog 2008-02-19 21:59:07.000000000 +0100
+++ sword-1.5.9-8/debian/changelog 2008-02-19 21:59:22.000000000 +0100
@@ -1,3 +1,10 @@
+sword (1.5.9-8) unstable; urgency=high
+
+ * diatheke failed to use shell_escape for the range parameter
+ properly, Closes: #466449
+
+ -- Daniel Glassey <wdg@debian.org> Mon, 18 Feb 2008 22:57:25 +0000
+
sword (1.5.9-7.1) unstable; urgency=medium
[ Luk Claes ]
diff -uNr -r sword-1.5.9-7.1/debian/patches/10_diatheke.diff sword-1.5.9-8/debian/patches/10_diatheke.diff
--- sword-1.5.9-7.1/debian/patches/10_diatheke.diff 1970-01-01 01:00:00.000000000 +0100
+++ sword-1.5.9-8/debian/patches/10_diatheke.diff 2008-02-19 21:59:22.000000000 +0100
@@ -0,0 +1,14 @@
+Index: sword-1.5.9/utilities/diatheke/cgi/diatheke.pl
+===================================================================
+--- sword-1.5.9.orig/utilities/diatheke/cgi/diatheke.pl 2008-02-18 22:10:09.000000000 +0000
++++ sword-1.5.9/utilities/diatheke/cgi/diatheke.pl 2008-02-18 22:30:25.000000000 +0000
+@@ -110,8 +110,7 @@
+ $range = $mydata;
+ $range =~ tr/+/ /;
+ $range =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
+- $range = "-r \"$range\"";
+- $range = shell_escape($range);
++ $range = "-r '" . shell_escape($range) . "'";
+ }
+
+ elsif ($varname eq "strongs") {
diff -uNr -r sword-1.5.9-7.1/debian/patches/series sword-1.5.9-8/debian/patches/series
--- sword-1.5.9-7.1/debian/patches/series 2008-02-19 21:59:07.000000000 +0100
+++ sword-1.5.9-8/debian/patches/series 2008-02-19 21:59:22.000000000 +0100
@@ -7,3 +7,4 @@
07_warn_tools.diff
08_gcc_43.diff
09_pcfile.diff
+10_diatheke.diff