-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 29 May 2019 12:38:57 +0200 Source: mupdf Binary: libmupdf-dev mupdf mupdf-tools Architecture: source amd64 Version: 1.5-1+deb8u5 Distribution: jessie-security Urgency: medium Maintainer: Kan-Ru Chen (陳侃如) <koster@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Description: libmupdf-dev - development files for the MuPDF viewer mupdf - lightweight PDF viewer mupdf-tools - commmand line tools for the MuPDF viewer Closes: 887130 888487 918971 Changes: mupdf (1.5-1+deb8u5) jessie-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2019-6130: Throw error when page number is out of range. (Closes: #918971). * CVE-2019-6192: Indirect object numbers must be in range. (Closes: #888487). * CVE-2018-5686: Don't allow reading from a 'dead' fz_stream. (Closes: #887130). Checksums-Sha1: 4319704fccd2285ee37dc41ea046f664482a17b2 2155 mupdf_1.5-1+deb8u5.dsc 9b451774d628d2953df7591f0fcdb465f7da4fa5 7528994 mupdf_1.5.orig.tar.gz a5648e31d8dd0b69d9f2aecf6154fcbcbe6fd734 31704 mupdf_1.5-1+deb8u5.debian.tar.xz c359c9ba844b99ddf3d16bbea97d22d51a6e33b4 3464570 libmupdf-dev_1.5-1+deb8u5_amd64.deb f98f0623a2963dc07998a6833f779dac23648467 3410204 mupdf_1.5-1+deb8u5_amd64.deb 52d0f1e3e45417b101a07e990d47d736f5ee1f50 3419950 mupdf-tools_1.5-1+deb8u5_amd64.deb Checksums-Sha256: d216cb947c1039a40fe52c80d3d774e8529139e48f3174953e4d694eb4e7e57c 2155 mupdf_1.5-1+deb8u5.dsc 9ef2a457c119031cbf84cf89bfe9bf01d3fbb4b739bb4707bb58bfe141102ff2 7528994 mupdf_1.5.orig.tar.gz 2056922969cf18acf20e217596c873f078fb187abb0cd9d0ee8b62ddfd947607 31704 mupdf_1.5-1+deb8u5.debian.tar.xz da70885fcfa48a3faed99e4d8c5c9aad792fb0664bd46b6c19e92d53a8a2aa3b 3464570 libmupdf-dev_1.5-1+deb8u5_amd64.deb 7b4984e6b17014123df8d1147ba18e9a957b539125f35130f7a4918bbbea822a 3410204 mupdf_1.5-1+deb8u5_amd64.deb 28ed1dc7eafa5fcfc307b8d165fe0740f08222d589d70f0ed0f808f0c91402f9 3419950 mupdf-tools_1.5-1+deb8u5_amd64.deb Files: 173b1045305e809044298ad0a16b8a70 2155 text optional mupdf_1.5-1+deb8u5.dsc 89dd2ad96a3679035b89007d7dcbd847 7528994 text optional mupdf_1.5.orig.tar.gz a7a3820d27673a62ebbed2c32a26431b 31704 text optional mupdf_1.5-1+deb8u5.debian.tar.xz 4f60748c3a6ca894e570330918375d4f 3464570 libdevel optional libmupdf-dev_1.5-1+deb8u5_amd64.deb e3629a5fd51fead796c0f80e9318b6a9 3410204 text optional mupdf_1.5-1+deb8u5_amd64.deb ca685952a749d9c9788ca5245ce3793f 3419950 text optional mupdf-tools_1.5-1+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl0V2/0VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxndYP/0BHWCcEb4SYhl1OgYZ/M3FKKXYl /jN76uUFQghG2v4mqCGCIs9D44ZPdznADSTm8II/CT4Xw/ToFoUk6RMWyJ7Zvb1Q tSsM4JFKBWVWT8ludI/HNH4KCHb9U4Uf4JWm4nGcN77XOWFBbC7RNPZ/bn/eeuA0 HKIP1LhBJtUljpgcczfNP6WAkDpdiQIelGJ6HyDh2/WBvzd5nYOQ8jXAMAtGpm91 LazFvG3xzCkqXfGkPpxRLmcZi4gdMgxrILAyuLfZPLlZbMfAnladO9EPXgjWea3J fVK2tt2/Rml5Gy1A1EX/BUq3m/KzFsgXJoHMtrIHND4tCgbH27Z/7thlP66C9W8n HPMOPhEG8ociyR4aL4QaNCkYJ69MhjZheAvmAC9QGF3xeZ+wYKS6UU5n1dUChYaI AafVMYusB4Z4OV3bReC5VOqLBsBPS06Mfn2BSliwhSWH7DaRrMPw195GaUxhvkyx XZqEZv7ekV4OY1ihW93+84Lp41znKLLrsG/B1KOKLAE1LyOG464x/ktD9cGLp5Zr SAxH7eRLemIHgMSXhkfIG6FhjgOTYwg3CNtm7GCysM2risNtPzf05qKZ0BXHMySi J2mbrkep5JY9kAtKrTmlyG1Xl/l5mbJ+/URxHcBRZz3TxT+g88ZHaJEJxuf9Gvxj VhSNNlZKAqCp6nYM =QHYZ -----END PGP SIGNATURE-----