Evince hole - USB worms

[witek]

I`ve read recently that a hole in Evince (fixed in January already) allows to prepare a USB worm in Linux. What about Salix? Was evince already patched?

[JRD]

About Evince, I don't know, but easy to check.
On Xfce: no problem, PDF and DVI files are not thumbnails. Same for LXDE and Fluxbox.
For KDE however I don't know.

[Edit] It's only in evince-thumbnailer and Salix does not use it, so Salix is not vulenrable to this bug.

[thenktor]

KDE uses okular

[gapan]

[Edit] It's only in evince-thumbnailer and Salix does not use it, so Salix is not vulenrable to this bug.

Yep.