On Tue 11 Jun 2019 at 13:20:40 +0200, Martin Steigerwald wrote: > Brian Potkin - 11.06.19, 10:42: > > On Tue 11 Jun 2019 at 09:53:50 +0200, Martin Steigerwald wrote: > […] > > > Two ways to use your (and our) time in a more productive manner are: > > > > > > 1) Retest with Okular 18.04 from Debian experimental (in case you > > > run > > > buster/sid). Or start KDE Neon in a machine and try with the newest > > > Okular available there. > > > > There might be time for me to do both of these today or tomorrow. > > Wonderful.
And good fun. I used the neon-user-20190606-1138.iso (okular 19.04.1). Everything behaved normally. No observed bug there. Okular 18.04 from experimental wouldn't install because of unmet depenencies. Another time, perhaps. > > > 2) Remind upstream in a friendly way to have a look at the issue. > > > Once there is a patch upstream it is very likely it could be > > > backported for buster. Maybe it would be an idea to raise the > > > upstream bug to KDE's security team. > > > > You seem to have done that. Thanks. > > Yes, appeared to be the quickest way to more this forward for me. > > There is a reply by Albert already. He is member of KDE security team > and AFAIK also develops on Okular. Please review his comments there and > answer accordingly. It appears he does not yet understand on how to > reproduce. Maybe, if you can, give a concrete example with the necessary > CUPS commands or probably an example configuration file. I will reply to the upstream bug report later. The various contributions to this report are appreciated. I have learnt a thing or two. Regards, Brian.