-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 19 Feb 2021 08:55:54 +0100 Source: mupdf Architecture: source Version: 1.14.0+ds1-4+deb10u3 Distribution: buster Urgency: high Maintainer: Kan-Ru Chen (陳侃如) <koster@debian.org> Changed-By: Bastian Germann <bastiangermann@fishpost.de> Closes: 983684 989526 Changes: mupdf (1.14.0+ds1-4+deb10u3) buster; urgency=high . * Non-maintainer upload. * Avoid a use-after-free in fz_drop_band_writer (CVE-2020-16600) (Closes: #989526) * Fix double free of object during linearization (CVE-2021-3407) (Closes: #983684) Checksums-Sha1: ae85a849c4d6b1d85dc19dd58a8b33af94d68309 2200 mupdf_1.14.0+ds1-4+deb10u3.dsc f23a38c916ca1211ecb0caf26060c176b0048a9d 33392 mupdf_1.14.0+ds1-4+deb10u3.debian.tar.xz 377920c9bc049c745a6d809e415a174cae29360f 11572 mupdf_1.14.0+ds1-4+deb10u3_amd64.buildinfo Checksums-Sha256: 2c83b8dbb166f0959fe9b4be3a88b3a3d9aee1fd4c97c332386a9889b09a1cbe 2200 mupdf_1.14.0+ds1-4+deb10u3.dsc 60c913510e65e633a311fecbb7134bc02497ab38f33cc51b17d74344e4a12340 33392 mupdf_1.14.0+ds1-4+deb10u3.debian.tar.xz 3c3cffe03425a1f7bac40c0aa681dc5031949c40054499ce52e47a273884ece5 11572 mupdf_1.14.0+ds1-4+deb10u3_amd64.buildinfo Files: edd8e1272ea05292cb8c9d23e4d0d4aa 2200 text optional mupdf_1.14.0+ds1-4+deb10u3.dsc 5d1de56d291f31416e3a324438e0caaf 33392 text optional mupdf_1.14.0+ds1-4+deb10u3.debian.tar.xz 6a58636a7d6720e4cd8c2a6e738e1373 11572 text optional mupdf_1.14.0+ds1-4+deb10u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmDEhAYACgkQkWT6HRe9 XTZsXxAAiYGYdGPBbZdQEQk+V1ZsmA7n+cFuwXsULILRrkuQLP99bNJ2GPjr6qwu Hlj19akNB3BCCW3fYgosCg2Tya4oFl2MFxpZYTZvrwFtAPsUfI1vhbIgPYt+UPnG FyweKTBBbBTm3EkRlKjN+qGi9mImsd1gZ7VajejTQqjnZrOiEwkVDTgXJqHitRAo NuS84b83n/YBYux0avv0vk40d8yR9DVT1619GMx0azPFrdIJzbBa/v0vk8HxyuXp opMapb1Vb2UbIpEpmi2l9Yc4xXz9Y5hDecf6iAe9FcYyD6aMoirzROzuPxq5BogK bievDEnXc4seZ5QYU3AYhv2RQkzKznyQodYkSzSivf8ZPB7cCYL6hSX/RgKTg3xj 5IvcASpNlw9BQv5QU7yQoYpmfw4xmIwofrs0/xpA+17vN2WlnNoNCoZK6MEoNMPe RnoY7zHdSVWMhwpiVcmb0r47Zg4bT32JMmLGdubRztPO4GnbfUZKIGNNxaV8vJw8 jvUXoGPJCTfRB9ZhZu7HRrWo8cZQemcIyuKIrh1nirWxdSlpaiVHZsGgt710SkUT HaQ25Zx20L7XW2+dA6PQPbTiS9p9/hUg2+EF1dJFmV2Kz1DqbpUAgHoLHo77FtUV KMHFhGQSMpuSqvEj/NTasHiqvaH7uDDGlBdwvFbySlWjypzGmXU= =rzO0 -----END PGP SIGNATURE-----