Re: evince Vulnerabilities in Xpdf affect several open source products

[Juanjo Marín <juanjomarin96 yahoo es>]

--- El mié, 13/10/10, Manuel <manuels spamadresse googlemail com> escribió:

> De: Manuel <manuels spamadresse googlemail com>
> Asunto: evince Vulnerabilities in Xpdf affect several open source products
> Para: evince-list gnome org
> Fecha: miércoles, 13 de octubre, 2010 14:43
> http://www.h-online.com/open/news/item/Vulnerabilities-in-Xpdf-affect-several-open-source-products-1107088.html
> 
> What's about evince?
> Especcially the windows version maybe needs an update!
> 
> Regards,
>   Manuel

This security bugs has been fixed on poppler by Albert Astals Cid with the help of the PDF provided by Joel Voss of Leviathan Security Group. Both poppler-0.14.4 and 0.15.0 has been fixed it.

Some distros like Debian or Fedora has already fixed that. I guess the next version of Evince for Windows will be released too ASAP.

Cheers,

  -- Juanjo Marin

[1] http://www.debian.org/security/2010/dsa-2119
[2] https://bugzilla.redhat.com/show_bug.cgi?id=639861