[ganesh:~/sword-1.5.9]% diff -r sword-1.5.9-7.1 sword-1.5.9-8
diff -uNr -r sword-1.5.9-7.1/debian/changelog sword-1.5.9-8/debian/changelog
--- sword-1.5.9-7.1/debian/changelog	2008-02-19 21:59:07.000000000 +0100
+++ sword-1.5.9-8/debian/changelog	2008-02-19 21:59:22.000000000 +0100
@@ -1,3 +1,10 @@
+sword (1.5.9-8) unstable; urgency=high
+
+  * diatheke failed to use shell_escape for the range parameter 
+    properly, Closes: #466449
+
+ -- Daniel Glassey <wdg@debian.org>  Mon, 18 Feb 2008 22:57:25 +0000
+
 sword (1.5.9-7.1) unstable; urgency=medium
 
   [ Luk Claes ]
diff -uNr -r sword-1.5.9-7.1/debian/patches/10_diatheke.diff sword-1.5.9-8/debian/patches/10_diatheke.diff
--- sword-1.5.9-7.1/debian/patches/10_diatheke.diff	1970-01-01 01:00:00.000000000 +0100
+++ sword-1.5.9-8/debian/patches/10_diatheke.diff	2008-02-19 21:59:22.000000000 +0100
@@ -0,0 +1,14 @@
+Index: sword-1.5.9/utilities/diatheke/cgi/diatheke.pl
+===================================================================
+--- sword-1.5.9.orig/utilities/diatheke/cgi/diatheke.pl	2008-02-18 22:10:09.000000000 +0000
++++ sword-1.5.9/utilities/diatheke/cgi/diatheke.pl	2008-02-18 22:30:25.000000000 +0000
+@@ -110,8 +110,7 @@
+ 	    $range = $mydata;
+ 	    $range =~ tr/+/ /;
+ 	    $range =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
+-	    $range = "-r \"$range\"";
+-            $range = shell_escape($range);
++	    $range = "-r '" . shell_escape($range) . "'";
+ 	}
+ 
+ 	elsif ($varname eq "strongs") {
diff -uNr -r sword-1.5.9-7.1/debian/patches/series sword-1.5.9-8/debian/patches/series
--- sword-1.5.9-7.1/debian/patches/series	2008-02-19 21:59:07.000000000 +0100
+++ sword-1.5.9-8/debian/patches/series	2008-02-19 21:59:22.000000000 +0100
@@ -7,3 +7,4 @@
 07_warn_tools.diff
 08_gcc_43.diff
 09_pcfile.diff
+10_diatheke.diff