Christian Weisgerber wrote:

gpdf 2.8.1 is based on xpdf 3.00pl1.  I've added the pl2 and pl3
security patches, as well as a fix for the CAN-2005-2097 DoS issue
I pulled out of the Mandrake SRPM.

It is important to realize that the xpdf code base is duplicated
several times in the tree: xpdf itself, gpdf, kpdf, and cups.  Any
security issue affecting xpdf is likely to also affect its derivatives.

The print/cups port is not affected.  The code based on xpdf (pdftops)
already contains these fixes.

Reply via email to