On Thu, Mar 27, 2008 at 01:17:46PM +0000, Ken Moffat wrote: > > Meanwhile, after I started to read lwn this morning I've raised some > more tickets for security fixes - I've assigned #2494 (xine-lib-1.11), > #2495 (firefox-2.0.0.13), #2497 (cups <1.3.5) to myself. For cups I > propose to use 1.2.12 with the patches from OpenSuse (I'm using > 1.3.6 on one box in a newer system, but I think I changed the > instructions - 1.2.12 should just work with the 1.2.11 instructions). > Actually, OpenSuse has one more patch (CVE-2007-3387) and when I looked them up at mitre they all originate with xpdf : the first is in xpdf-3.02, the rest are in pl1 (pl2 is now available - it doesn't say what it fixes).
The first references poppler < 0.5.91 (we are on 0.5.4), I see 0.8.0 is now out (and poppler-data-0.2.0) but I haven't even used 0.6/0.1 with the BLFS-6.3 book. A quick look suggests evince is the user to test. Perhaps also abiword, but that always complains that poppler was installed without the xpdf headers (and can nevertheless save as .pdf). - I feel fairly confident the updated kde versions in the book include these fixes, but on my current system I can see that kdegraphics-3.5.8 appears to be using poppler. Will test further, and rename the ticket. I thought software reuse was supposed to be a good thing ? ĸen -- das eine Mal als Tragödie, das andere Mal als Farce -- http://linuxfromscratch.org/mailman/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
