Brian May <bam@debian.org> writes: > It appears if I can work out how to define SPLASH_CMYK for the build, > then I can fix CVE-2019-10871 too. So I will investigate this > possibility. This change broke xpdf, so had to be reverted. I amy look into this again next month. -- Brian May <bam@debian.org>