[tlbuild] Fwd: ANNOUNCE: Xpdf 3.02pl4 - a PDF viewer for X

[Martin Schröder]

FYI. I don't think this warrants a rebuild of the affected binaries.

I also confess that I don't grok how to apply this to our source tree...

Best
   Martin

---------- Forwarded message ----------
From: Derek B. Noonburg <derekn at foolabs.com>
Date: 2009/10/15
Subject: ANNOUNCE: Xpdf 3.02pl4 - a PDF viewer for X
To: martin at oneiros.de


A new release of Xpdf is available to fix security holes reported by
various parties, with the following CVE identifiers:

   CVE-2009-3603
   CVE-2009-3604
   CVE-2009-3605
   CVE-2009-3606
   CVE-2009-3608
   CVE-2009-3609

The source code patch is available here:

   ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch

This patch should be applied to 3.02pl3, i.e., you'll need to apply
all four patches (pl1, pl2, pl3, pl4) in order.

Updated binaries are available here:

   http://www.foolabs.com/xpdf/download.html

- Derek