The patch for supplementary groups, that is currently being applied for the Debian version of CUPS-PDF has been implemented into the upstream source with version 2.6.0. Furthermore, a case in which the patch as applied to Debian currently won't work has been fixed. Best wishes, Volker