There are 2 open security issues in bullseye.
2 issues left for the package maintainer to handle:
- CVE-2022-30974:
(needs triaging)
compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.
- CVE-2022-30975:
(needs triaging)
In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
You can find information about how to handle these issues in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/m/mujs.png){kind=link}