In a2ps-check-buffer it'd be good if the buffer-file-name was quoted for
the compile command string

  (let ((compile-command (concat a2ps-program
                                 " -q < /dev/null -o - > /dev/null -E"
                                 (shell-quote-argument buffer-file-name))))

This would protect a filename with spaces or special characters.  (Which
would be unusual, but unquoted a malicious filename could execute any
shell code.)

Incidentally `null-device' (emacs 20 up) could be used instead of
/dev/null for maximum portability.  But that doesn't affect debian.