Brian Potkin - 11.06.19, 10:42: > On Tue 11 Jun 2019 at 09:53:50 +0200, Martin Steigerwald wrote: […] > > Two ways to use your (and our) time in a more productive manner are: > > > > 1) Retest with Okular 18.04 from Debian experimental (in case you > > run > > buster/sid). Or start KDE Neon in a machine and try with the newest > > Okular available there. > > There might be time for me to do both of these today or tomorrow.
Wonderful. > > 2) Remind upstream in a friendly way to have a look at the issue. > > Once there is a patch upstream it is very likely it could be > > backported for buster. Maybe it would be an idea to raise the > > upstream bug to KDE's security team. > > You seem to have done that. Thanks. Yes, appeared to be the quickest way to more this forward for me. There is a reply by Albert already. He is member of KDE security team and AFAIK also develops on Okular. Please review his comments there and answer accordingly. It appears he does not yet understand on how to reproduce. Maybe, if you can, give a concrete example with the necessary CUPS commands or probably an example configuration file. Thank you very much. Best,