-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 17:22:19 +0200 Source: mupdf Architecture: source Version: 1.17.0+ds1-2+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: Kan-Ru Chen (陳侃如) <koster@debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: mupdf (1.17.0+ds1-2+deb11u2) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2026-3308: integer underflow leading into heap buffer overwrite. Checksums-Sha1: 84fd8a2db41ad53f17cfa4e653c4593ee3791f3e 2260 mupdf_1.17.0+ds1-2+deb11u2.dsc 3277f1673dc49e8a42d48dbc3331e490f16732f7 28378812 mupdf_1.17.0+ds1.orig.tar.xz 00f9955b71adf1e6924a3dcb6fb118a9e199eec2 33656 mupdf_1.17.0+ds1-2+deb11u2.debian.tar.xz d9c23b4ad818a7346e4574bebcd3be4eceda5a5b 8891 mupdf_1.17.0+ds1-2+deb11u2_source.buildinfo Checksums-Sha256: affd2e7fe91ccd88e6c8d22df15eb20c967de407e0023b7076868cbf80733878 2260 mupdf_1.17.0+ds1-2+deb11u2.dsc 78f54e63ac12f446d7f58ad6499c76e27f952bade2c688d09a0a1bc61a6f4db5 28378812 mupdf_1.17.0+ds1.orig.tar.xz 8be60e00aa5729e84795e534164695c9bbfdad822309037107d610e0b03a1206 33656 mupdf_1.17.0+ds1-2+deb11u2.debian.tar.xz 0a023f7605a7613fd03007f6197735cfb7394ec950da3f5451c2a3bc0534de85 8891 mupdf_1.17.0+ds1-2+deb11u2_source.buildinfo Files: c400da7016f2ce9869f13cea476fe40d 2260 text optional mupdf_1.17.0+ds1-2+deb11u2.dsc 79fa569ad8211ceacb7e72f765ffc7bf 28378812 text optional mupdf_1.17.0+ds1.orig.tar.xz ad5e7a6c5725c9f2cb64151c9bd61a6e 33656 text optional mupdf_1.17.0+ds1-2+deb11u2.debian.tar.xz f4f0f76aee8591c3451589146d738819 8891 text optional mupdf_1.17.0+ds1-2+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmnmSj0ACgkQnUbEiOQ2 gwJdag/8C1z4E7Uwr1NOfLVQWETOtWKgvIbfnT8PQ2H5aitj0w9Fo7c9Ujg0D9LG e7z8lqclWzNzmfquxzqnSo1MVLIufstgMPd/J/HJyn91P6w6TSU+p1V/ouqO5ucN VK74IJE16YCqJZCF8RauyfjdGQgqwpuLQmIcO6otIcoll1seIFohDUhD+3UGzz3e 5NpF7ZyhaIzoATid7eYDeTal4XXgdHp3DWtTWVlysnjddj+NsAfwW1azAhjOZXcv jwoBMYo4rTNW+ciOrisHoAYXZwX2t6W8CN6DPUGAqoaBG7hFHcoBigGX0x5861t6 0btZVKMW4FuQU1QeBnL4dFlrpNX8wgVy39Q7OXFnyYw2pqhsOoWbWL5y8esErZxR Lt2gOd8Nhuzs5L2wLdkd4yeJk86o42pkBLneP049YBGcGbXh2o8fmrP/IvAcfjPW L8aRZls3LLbHxw0BVXHv2GKJ+L7HawIzh/8Ce9digW6HhwlRqA+jUCVWoDMNf+zW eMNbvQPbYTFvkOvEl1Y5MoKpOSkQP9t9o7HkOe9qwxgs/1bL6rkrXDr1MybiZVkU csTiRi48V1TuMutc7qBfs0sFWxtjoeUQi2/2jzuJ+FUgoyqRDRywCyNPZtK7Vkt0 iGYH7e+40FmviDRkrcqCRk9Acmz2FPzgThGR1Zp7x8YaOG1yLyg= =eEie -----END PGP SIGNATURE-----
