Package: xpdf
Version: 3.02-11
Severity: normal
Tags: security

Hi Debian xpdf maintainers!
Thanks a lot for maintaining my favorite PDF viewer!

I noticed a little regression (probably introduced during the
conversion into a libpoppler front-end).

In the past, xpdf used to pop up a useful dialog window to ask
the user for a password, when dealing with password-protected PDF
files. After typing the password in, the user was able to view
the contents of the password-protected PDF file.

Nowadays, when the user attempts to view a password-protected PDF
file, no dialog window is shown and xpdf exits immediately with
the following error:

  $ xpdf protected_file.pdf
  Error: Incorrect password
  $ echo $?
  1

On the other hand, if the user provides the correct password
through the command-line option:

  $ xpdf -upw my_secret_password protected_file.pdf

everything works fine and the file contents are correctly visualized.

Of course, requiring the user to provide a password on the command
line is not a good idea, from a security point of view: the password
(in clear) is visible to anyone who takes a look at the screen, it's 
saved in the shell history, and so forth.

As a consequence, I miss the old "insert password" dialog window!
Could this feature be restored, please?

Thanks for your time!


N.B.:
Before filing this bug report, I took a look at the already filed ones
and noticed bug #601375. I thought it could be the same issue, but it
probably isn't, since the file mentioned in that bug report gives me
a different error message:

  $ xpdf HTUSA-EBU4-3.pdf 
  Error: Weird encryption info
  Error: Incorrect password



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (800, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages xpdf depends on:
ii  lesstif2                      1:0.95.2-1 OSF/Motif 2.1 implementation relea
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
ii  libgcc1                       1:4.4.5-8  GCC support library
ii  libpoppler5                   0.12.4-1.2 PDF rendering library
ii  libstdc++6                    4.4.5-8    The GNU Standard C++ Library v3
ii  libx11-6                      2:1.3.3-4  X11 client-side library
ii  libxt6                        1:1.0.7-1  X11 toolkit intrinsics library

Versions of packages xpdf recommends:
ii  gsfonts-x11                   0.21       Make Ghostscript fonts available t
ii  poppler-data                  0.4.3-1    Encoding data for the poppler PDF 
ii  poppler-utils                 0.12.4-1.2 PDF utilitites (based on libpopple

xpdf suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to