extractbb.lua wrapper for safety

git-svn-id: svn://tug.org/texlive/trunk@71664 c570f23f-e606-0410-a88d-b1316a301751

5 files changed, 9 insertions, 1 deletions

diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog
index b7e89628ec3..cbcee62f617 100644
--- a/Build/source/texk/kpathsea/ChangeLog
+++ b/Build/source/texk/kpathsea/ChangeLog
@@ -1,3 +1,8 @@
+2024-07-01  Karl Berry  <karl@tug.org>
+
+	* texmf.cnf (shell_escape_commands): restore extractbb,
+	now as a wrapper script that protects against the exploit.
+
 2024-06-29  Karl Berry  <karl@tug.org>
 
 	* texmf.cnf (shell_escape_commands): remove extractbb.
diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf
index 333e6325b3d..5df6bd97f9c 100644
--- a/Build/source/texk/kpathsea/texmf.cnf
+++ b/Build/source/texk/kpathsea/texmf.cnf
@@ -649,6 +649,7 @@ shell_escape = p
 % 
 shell_escape_commands = \
 bibtex,bibtex8,\
+extractbb,\
 gregorio,\
 kpsewhich,\
 l3sys-query,\
@@ -660,7 +661,6 @@ r-mpost,\
 texosquery-jre8,\
 
 % other programs considered:
-% extractbb - allowed in the past, but can be exploited.
 % dvips - but external commands can be executed, need at least -R1.
 % epspdf, ps2pdf, pstopdf - need to respect openout_any,
 %   and gs -dSAFER must be used and check for shell injection with filenames.
diff --git a/Build/source/texk/texlive/linked_scripts/Makefile.am b/Build/source/texk/texlive/linked_scripts/Makefile.am
index ba4e7be48fd..0bd39fbab96 100644
--- a/Build/source/texk/texlive/linked_scripts/Makefile.am
+++ b/Build/source/texk/texlive/linked_scripts/Makefile.am
@@ -235,6 +235,7 @@ texmf_other_scripts = \
 	texfindpkg/texfindpkg.lua \
 	texdoc/texdoc.tlu \
 	texfot/texfot.pl \
+	texlive/extractbb.lua \
 	texlive/fmtutil-sys.sh \
 	texlive/fmtutil-user.sh \
 	texlive/fmtutil.pl \
diff --git a/Build/source/texk/texlive/linked_scripts/Makefile.in b/Build/source/texk/texlive/linked_scripts/Makefile.in
index 447f6518ae1..13b8d4046ad 100644
--- a/Build/source/texk/texlive/linked_scripts/Makefile.in
+++ b/Build/source/texk/texlive/linked_scripts/Makefile.in
@@ -452,6 +452,7 @@ texmf_other_scripts = \
 	texfindpkg/texfindpkg.lua \
 	texdoc/texdoc.tlu \
 	texfot/texfot.pl \
+	texlive/extractbb.lua \
 	texlive/fmtutil-sys.sh \
 	texlive/fmtutil-user.sh \
 	texlive/fmtutil.pl \
diff --git a/Build/source/texk/texlive/linked_scripts/scripts.lst b/Build/source/texk/texlive/linked_scripts/scripts.lst
index 479473cdf8c..04eacde6e68 100644
--- a/Build/source/texk/texlive/linked_scripts/scripts.lst
+++ b/Build/source/texk/texlive/linked_scripts/scripts.lst
@@ -176,6 +176,7 @@ texdirflatten/texdirflatten
 texfindpkg/texfindpkg.lua
 texdoc/texdoc.tlu
 texfot/texfot.pl
+texlive/extractbb.lua
 texlive/fmtutil-sys.sh
 texlive/fmtutil-user.sh
 texlive/fmtutil.pl