The remote host is missing updates announced in advisory GLSA 200601-17.

All Xpdf users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-text/xpdf-3.01-r5' All Poppler users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-text/poppler-0.4.3-r4' All GPdf users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-text/gpdf-2.10.0-r3' All libextractor users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-libs/libextractor-0.5.9' All pdftohtml users should migrate to the latest stable version of Poppler. http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200601-17 http://bugs.gentoo.org/show_bug.cgi?id=117481 http://bugs.gentoo.org/show_bug.cgi?id=117494 http://bugs.gentoo.org/show_bug.cgi?id=117495 http://bugs.gentoo.org/show_bug.cgi?id=115789 http://bugs.gentoo.org/show_bug.cgi?id=118665

Xpdf, Poppler, GPdf, libextractor and pdftohtml are vulnerable to integer overflows that may be exploited to execute arbitrary code.