"Shadow Attack" vulnerability? SOLVED

[libove]

Per ZDNet, https://www.zdnet.com/article/new-shado ... pdf-files/
.. Tracker PDF products (among many others) are partly vulnerable to content in signed PDF documents hiding other (malicious) content, so that a signed document can be made to appear to contain something other than what the user (thought that they) signed.
The article notes that patches are available, though it isn't explicit about for which PDF products patches are available.
Tracker, please make an official statement.
thank you.

[TrackerSupp-Daniel]

Hi, libove

Currently I can say that our most recently releases are correctly protected from most Shadow attacks. When we next make changes to our build history page, we will be updating the history to show which release the fix was implemented in. https://www.pdf-xchange.com/produc ... or/history

Going forward, so long as you are using the latest version of our software, you can rest assured that these functions will work as expected.

Kind regards,

[TrackerSupp-Daniel]

Hi, again,

I wanted to offer further confirmation, previously I said we are covered for most shadow attacks. Our Lead developer has just informed me that after some extensive re-testing, he can confirm that the current release (341.0) is not vulnerable to any shadow attacks.

Kind regards,