Stub for now, details will follow.
See bug #117481 for details.
The stable version of cups (and newer) does not use the included xpdf, but gets it's apps from xpdf/poppler (depending on version). Therefore, no problems for cups.
Heh, yeepee.