-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 28 Aug 2020 20:42:12 +0200 Source: mupdf Architecture: source Version: 1.14.0+ds1-4+deb10u1 Distribution: buster-security Urgency: high Maintainer: Kan-Ru Chen (陳侃如) <koster@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 931475 Changes: mupdf (1.14.0+ds1-4+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Heap-based buffer overflow in fz_append_display_node (CVE-2019-13290) (Closes: #931475) Checksums-Sha1: 322ee26e3aca8e833970b7368a6870d41c51ae12 2355 mupdf_1.14.0+ds1-4+deb10u1.dsc 2321618e56a908cfa3444f019f805d688d9fa127 24348296 mupdf_1.14.0+ds1.orig.tar.xz 66a3f48db6554f91655c37168372eb0940195ed1 31780 mupdf_1.14.0+ds1-4+deb10u1.debian.tar.xz Checksums-Sha256: 217f6c61e49b5e00aca3501002821198aae9fbf6b3482fc5117472be7109b211 2355 mupdf_1.14.0+ds1-4+deb10u1.dsc 289b4f5cb4ffa2f4c9ca67fda5a48deb9615f2ca51f276b5fd9318b62329cc93 24348296 mupdf_1.14.0+ds1.orig.tar.xz 3db218324955da2b9cde0ce035b1de2917be2fd40dbff7b4fde7f2d2ce5fe38e 31780 mupdf_1.14.0+ds1-4+deb10u1.debian.tar.xz Files: 3db4fab5c541df94477ed4bd63dabb08 2355 text optional mupdf_1.14.0+ds1-4+deb10u1.dsc 10b771cd3389a4e0b8a0deceb5254e96 24348296 text optional mupdf_1.14.0+ds1.orig.tar.xz 08100954c1e3f3a39ff428fc60fd4869 31780 text optional mupdf_1.14.0+ds1-4+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl9JUdNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EQP4P/3K4GcFIk1/Kpk7J+jAGRyYH95YYuNyO Vk/ydceoAUj+UBYvtlwZlg9PUMuxyBo072SKR0ZwgyGDlkDdUMNyPn49hGDYXuEt YbyX7AtI2Ipw9gcAfOjzGhIIlKG9ULi8F2jSd5y09SVBXYGJJxn30GsSRlJp/a5d 5hb6L4Z1DLVBZFxi9YPXOBW/aTjHGrBG7dwIEs1mPcUJfXXrtCYTbh8AgcoA7oZr sKnH8s3rFRyRNVluuN1MX3yM/AJSlBl0Gc61pWmSm+5uPEohl+y3FnZrGGcvKSZ0 NZYmbD2zUi2YwEgmU4JhV8+gChDchEslieqOsCdtRrRkJYmR+zPx61djrRq3BGfZ pNkVREzT85gFkbPJDa3zoo3j5uz01q/MA1aIt89F9yBTLW+uONyBsXG3LD95+AlG 1KICKmwrhtnNet0y2TCqf9Tc5wIOHeIkEM9BaCtVSl7PHZNtyuS+R+zpaGTeHltM nweExYy9HYqoP7AKZ90EVEtSH8YIKQGVNle+3rI8B/Mv7WewQQjQMbFa4WVQUaMN SWj05brFsYnH4CruFWc1hK4p6ql8l+2pqgOExjcAdEPvgmQNA81BJYnFFIrQhhTQ IBxjv/oj/4wDrHFosrfzSUvgCXqRTaFJ5zcXWTs/j1nGgljBwoREdDQPk2HPmmy+ sT1HDrpSJxge =yYSq -----END PGP SIGNATURE-----