The primary issue then would seem to be that the internal Trinity xpdf is not being updated with security patches.
I don't know why we need a copy of xpdf to be honest. This needs to be looked into with an eye towards using the system xpdf libraries.
Bug reports 1175 and 1176 filed.
Darrell