Date: Tuesday, August 30, 2016 @ 20:23:41 Author: eworm Revision: 188073
upgpkg: mupdf 1.9_a-5 make sure that number of colors in mesh params is valid https://security-tracker.debian.org/tracker/CVE-2016-6525 Modified: mupdf/trunk/PKGBUILD ----------+ PKGBUILD | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2016-08-30 18:30:37 UTC (rev 188072) +++ PKGBUILD 2016-08-30 20:23:41 UTC (rev 188073) @@ -9,7 +9,7 @@ pkgbase=mupdf pkgname=(libmupdf mupdf mupdf-gl mupdf-tools) pkgver=1.9_a -pkgrel=4 +pkgrel=5 pkgdesc='Lightweight PDF and XPS viewer' arch=('i686' 'x86_64') url='http://mupdf.com' @@ -20,12 +20,14 @@ options=('staticlibs') source=("http://mupdf.com/downloads/mupdf-${pkgver/_/}-source.tar.gz"; '0001-mupdf-openjpeg.patch' - 'mupdf-0001-bug-696941-fix-use-after-free.patch::http://git.ghostscript.com/?p=mupdf.git;a=commitdiff_plain;h=fa1936405b6a84e5c9bb440912c23d532772f958' + 'mupdf-0001-bug-696941-fix-use-after-free.patch::http://git.ghostscript.com/?p=mupdf.git;a=patch;h=fa1936405b6a84e5c9bb440912c23d532772f958' + 'mupdf-0002-make-sure-that-number-of-colors-in-mesh-params-is-valid.patch::http://git.ghostscript.com/?p=mupdf.git;a=patch;h=39b0f07dd960f34e7e6bf230ffc3d87c41ef0f2e' 'mupdf.desktop' 'mupdf.xpm') md5sums=('658b90788a57d858dcb069cf326e11c3' 'c2d096ecd41ae26735551d01099c0a3e' - '5fb16881b14c686a44957ec53f7fa924' + 'cc0d5363bf0fd4daa46380f3799e1d16' + 'f73ad47c6d57aa6cc6fcfbc9aa98465f' '39b54f82a763aac54e352315a0ee9037' 'f3f35e7320bafde331250de1c99186a1') @@ -40,6 +42,11 @@ # https://security-tracker.debian.org/tracker/CVE-2016-6265 patch -Np1 < "${srcdir}/mupdf-0001-bug-696941-fix-use-after-free.patch" + # Make sure that number of colors in mesh params is valid. + # CVE-2016-6525 + # https://security-tracker.debian.org/tracker/CVE-2016-6525 + patch -Np1 < "${srcdir}/mupdf-0002-make-sure-that-number-of-colors-in-mesh-params-is-valid.patch" + # fix function for openjpeg 2.1.x patch -Np1 < "${srcdir}/0001-mupdf-openjpeg.patch"
