Christian Weisgerber wrote:
gpdf 2.8.1 is based on xpdf 3.00pl1. I've added the pl2 and pl3 security patches, as well as a fix for the CAN-2005-2097 DoS issue I pulled out of the Mandrake SRPM.It is important to realize that the xpdf code base is duplicated several times in the tree: xpdf itself, gpdf, kpdf, and cups. Any security issue affecting xpdf is likely to also affect its derivatives.
The print/cups port is not affected. The code based on xpdf (pdftops) already contains these fixes.