-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 07 Nov 2017 12:38:35 +0100 Source: mupdf Binary: libmupdf-dev mupdf mupdf-tools Architecture: source amd64 Version: 0.9-2+deb7u4 Distribution: wheezy-security Urgency: high Maintainer: Kan-Ru Chen <koster@debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libmupdf-dev - development files for the MuPDF viewer mupdf - lightweight PDF viewer mupdf-tools - commmand line tools for the MuPDF viewer Changes: mupdf (0.9-2+deb7u4) wheezy-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2017-15587: An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf_xref.c * Fix CVE-2017-14687: MuPDF allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. This occurs because of mishandling of XML tag name comparisons. Checksums-Sha1: 1f9539863b8867210200db8c9feb31d89a88a3ed 2193 mupdf_0.9-2+deb7u4.dsc 15fd4ba141af769ca08a2c6574156e5b1881b02a 13582 mupdf_0.9-2+deb7u4.debian.tar.gz e436565e7ed26cb14760ca59b6e6753bf0a556d5 3229154 libmupdf-dev_0.9-2+deb7u4_amd64.deb 0695d47f08f8235226aeb04331da6d02539cdf57 3150312 mupdf_0.9-2+deb7u4_amd64.deb 8643bee2d48d520c55c3b02d4967eeff4ac12cd4 3427420 mupdf-tools_0.9-2+deb7u4_amd64.deb Checksums-Sha256: 7043dd118a4983520737ed2c3fdd30b8eb4d06f932781f4c511e3b73e507185e 2193 mupdf_0.9-2+deb7u4.dsc c4a0347b5c290960324742ac3ef4d047fa5331b4041a21f372134d4fe289c011 13582 mupdf_0.9-2+deb7u4.debian.tar.gz 441d79fa1171f728c38e1b1360981b637fc78b3e7b223a4428afdd1d658ae115 3229154 libmupdf-dev_0.9-2+deb7u4_amd64.deb ac81cbcca6c2f0b716468e14983efe310660325898e312ac0b3d33884f05bde2 3150312 mupdf_0.9-2+deb7u4_amd64.deb 7ca4e5362cfbdc9cf805f8e9fae9ab3dabd7d6fc898b2f514bbb8063dfe1c109 3427420 mupdf-tools_0.9-2+deb7u4_amd64.deb Files: d4f38633478b0df648cea93a742e77ee 2193 text optional mupdf_0.9-2+deb7u4.dsc a1f675587cd6acfd21c0d21ba9d211ac 13582 text optional mupdf_0.9-2+deb7u4.debian.tar.gz 480cba37c44910bcd19c1612d90bc2f8 3229154 libdevel optional libmupdf-dev_0.9-2+deb7u4_amd64.deb 6e125fc5d6cc040ddd1ff23febd95cbe 3150312 text optional mupdf_0.9-2+deb7u4_amd64.deb c9ec3196332065e3cf99483d86e0ee48 3427420 text optional mupdf-tools_0.9-2+deb7u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAloBnaBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk6B0QALCGzncy9jRMUNnYotTkyfSsnseWGyraiTaW V6x+bRhuZCgHLEHIEN0emfSHj+0nD8+X+w53l91dPe9tdjq67A13yiYoaq6ky2WB HtTDDj/LnfDgXMZFuAhV9y9r6ZecU0nhQWIAHVwQ62a5FP6665+piCt/imM6+l0R gOYiE31llgMZoAAkPIi/evEOD8A5fr9awWbV6sP2UqmUJjDWN8P5LsKwwmz+V6A4 dT9A55Bvzqx7zto9m6vM8pD5Zr/wAVXO3BRwGQ7B3rUv2YiVgwgfz60aS9R6XuKr dFmBt602o2dCg9HwIDQtQYzt8kjgxX02yPUWl3+8EJB5NQrV4N9c0Qbdal9CDkRq osgBZMay6RR2QKhmlyGtOil6tq533x+EpGy9gY3knDVKoQ5zHIkLSK8tDdVeyfzS kfWs3nVQxPHQkIVujAJEI6zes1daCR6JYksHZUEq1x9pK0hjkmy0EpjWH4mZJ+mK tJtVQhQ2WrFK/X7LnpuaS52HwpgKANghoyT2bQFdePufaLSdhuAUQW6a9JQo7JX0 akSi4NzDRAFzp1miktU5u/Sfmsk+s6G0CkN8B/8Oy61wnOTurP6a0MySbsGycsHW EVJh8ZWuf2wrru28tscBUMpg/cp9K2SyqbhQMcpwEdrv/Uoy34QnitIZPlgjs5iW 4F3GYNDt =Ae4m -----END PGP SIGNATURE-----