Update to 1.9, which includes:

1) Ghostgum modifications to the DEC original:

'Version 1.9 is a modification of 1.8h to recognise excessive space in 
"ashow" as being a word separator, as found output from groff 1.08. 
Also fixed widthshow, awidthshow and added xshow, yshow and xyshow.  
Uses ANSI prototypes.  These are now required, not optional.
Fixes a number of compiler warnings.
Note that neither of the original authors still work at DEC/Compaq/HP.
2004-01-09 by Russell Lang at Ghostgum Software Pty Ltd.

Version 1.8h is a modification of the original 1.8 to allow 
operation with Aladdin Ghostscript 6.0, to add -output to 
Windows and OS/2 executables, and to insert line breaks
and form feeds is pstotext output.  Modifications made 
2000-07-15 by Russell Lang at Ghostgum Software Pty Ltd.
main.c changed to use mkstemp not tempnam for Unix, 
2000-06-02 by Russell Lang at Ghostgum Software Pty Ltd.'

2) Two Debian security patches:

 'Security fix. popen(3) was being used in a construct which could
    did not perform sufficient cleanup/quoting of filenames; these filenames 
    could come from untrusted sources like a web indexing service and could 
    thus be misused to execute shell code as the user running pstotext. The 
    use of popen(3) has been replaced by an explicit fork/pipe construct 
    which does not involve the use of a shell. 

  * [main.c] Security fix: call Ghostscript with -dSAFER to prevent malicious
    PostScript data from altering the filesystem or opening pipes to arbitrary
    external programs. This problem was remotely exploitable (through
    pstotext's registration with /etc/mailcap as a viewer application).
    The problem was identified and patched by Max Vozeler <xam@debian.org>.'

Fix: Patch attached with submission follows: