• [SECURITY] [DSA 3797-1] mupdf security update

    From Moritz Muehlenhoff@1:229/2 to All on Tue Feb 28 23:00:02 2017
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3797-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 28, 2017 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : mupdf
    CVE ID : CVE-2016-8674 CVE-2017-5896 CVE-2017-5991

    Multiple vulnerabilities have been found in the PDF viewer MuPDF, which
    may result in denial of service or the execution of arbitrary code if
    a malformed PDF file is opened.

    For the stable distribution (jessie), these problems have been fixed in
    version 1.5-1+deb8u2.

    For the testing distribution (stretch), these problems have been fixed
    in version 1.9a+ds1-4.

    For the unstable distribution (sid), these problems have been fixed in
    version 1.9a+ds1-4.

    We recommend that you upgrade your mupdf packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAli18LMACgkQEMKTtsN8 TjbKWA//VFQvwbSYl5eDRgi27S9gVfeYAUQLPPXsp1/FUDSZajNZCOWfqHlFw/ae nv6gXIrtYZ4/NUpSNddlSFj6q5nMbt7ajBP8XpH+1cZtOBzawtGk8XCEe0zMROxb XE7Ttzch+DrZ6sB2ObJ3PS4M0D6Z7T65kUmIezIuLThZU3vu7XZ8EOkaf4ILVPF/ I94/acIdRO1TP0kTxAwSYJhm1KxkuWe1EH4N7uyCuQ34fq2mdpKovsZKNygnUgd6 kjJgc/zKSRabqfmF53gXMUd9Sni/oD+akIMotFznjm+yM4XPf07DxOVZtGvzM3Zw 6bZ+EmYCGivay90Zvi6DzeWlOM38tjiVL+aOtV0esMrU5lpxBvQAqPhZcCdf2FgE e3tcHI6wDK9+V331f/8LwN6ZKpo1aZ+yex9hgeTj8Nrj2KyFUl2JeKWtdmYxKppe DwHcC1ulaDqHJ1TOGGbvAAR47wRC7qtvu5LPdPrvCd3NpkNyqiO7f4y9EuciQhxe mdMVI4xnIYOWEYPaoPaSi31RZ+1GGLhbrk4+M5baFDHAtsfJaj3Y9Hi8zoxjXA1n 5Y4zUHVosyew+YF9zZ7iYtwyNGqIvHcL6ONW6ccPPwqm+KwhjZT4Wb/SC6G1cdQX tCTACLQ7yP//ijvyUgjs0DGwUNYYc94Nll7TiPfPaUqUBqwlJ0w=
    =kdvT
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)