$NetBSD: patch-CVE-2015-8107,v 1.1 2017/04/25 22:19:20 tez Exp $

Patch for CVE-2015-8107 from http://seclists.org/oss-sec/2015/q4/284


--- lib/output.c.orig	2017-04-25 21:23:33.908698400 +0000
+++ lib/output.c
@@ -525,7 +525,7 @@ output_file (struct output * out, a2ps_j
 		     expand_user_string (job, FIRST_FILE (job),
 					 (const uchar *) "Expand: requirement",
 					 (const uchar *) token));
-	output (dest, expansion);
+	output (dest, "%s", expansion);
 	continue;
       }