Your message dated Sat, 16 Mar 2019 01:23:45 +0000
with message-id <[email protected]>
and subject line Bug#924351: fixed in mupdf 1.14.0+ds1-4
has caused the Debian Bug report #924351,
regarding CVE-2018-16647 CVE-2018-16648
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
924351: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924351
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mupdf
Version: 1.14.0+ds1-3
Severity: grave
Tags: security
CVE-2018-16648:
https://bugs.ghostscript.com/show_bug.cgi?id=699685
http://www.ghostscript.com/cgi-bin/findgit.cgi?38f883fe129a5e89306252a4676eaaf4bc968824
CVE-2018-16647:
https://bugs.ghostscript.com/show_bug.cgi?id=699686
http://www.ghostscript.com/cgi-bin/findgit.cgi?351c99d8ce23bbf7099dbd52771a095f67e45a2c
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: mupdf
Source-Version: 1.14.0+ds1-4
We believe that the bug you reported is fixed in the latest version of
mupdf, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Kan-Ru Chen (陳侃如) <[email protected]> (supplier of updated mupdf package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 16 Mar 2019 09:42:00 +0900
Source: mupdf
Binary: libmupdf-dev mupdf mupdf-dbgsym mupdf-tools mupdf-tools-dbgsym
Architecture: source amd64
Version: 1.14.0+ds1-4
Distribution: unstable
Urgency: medium
Maintainer: Kan-Ru Chen (陳侃如) <[email protected]>
Changed-By: Kan-Ru Chen (陳侃如) <[email protected]>
Description:
libmupdf-dev - development files for the MuPDF viewer
mupdf - lightweight PDF viewer
mupdf-tools - command line tools for the MuPDF viewer
Closes: 924351
Changes:
mupdf (1.14.0+ds1-4) unstable; urgency=medium
.
[ Salvatore Bonaccorso ]
* Avoid being smart about keeping only a single reference to the buffer
(CVE-2018-16647)
(Closes: #924351)
* Fix text used as clip mask in pdfwrite device (CVE-2018-16648)
(Closes: #924351)
* Fix typo in pdf write device
.
[ Kan-Ru Chen ]
* Add more options to mupdf wrapper and display usage correctly
Checksums-Sha1:
f4d770b3cc3077be3eb69243731fa747ee65f74c 2168 mupdf_1.14.0+ds1-4.dsc
1b984725bbf8d868dfd5725a2dc7bbeaf757ea7b 31036 mupdf_1.14.0+ds1-4.debian.tar.xz
9dd916d8e9e33110c01b179d0ec7b0aed235f968 22561944
libmupdf-dev_1.14.0+ds1-4_amd64.deb
38960ad45d61eb43df545677c6694885ba9a226d 2975772
mupdf-dbgsym_1.14.0+ds1-4_amd64.deb
146149366e03cb39cf6eab62661855e76db0a78b 3266948
mupdf-tools-dbgsym_1.14.0+ds1-4_amd64.deb
f6de0768f17ee003a2524a0ccbd1010093798e78 20092868
mupdf-tools_1.14.0+ds1-4_amd64.deb
810279868bf854723ec04ad384f223d32a4bffb4 11586
mupdf_1.14.0+ds1-4_amd64.buildinfo
739daefe9e89f441bfe58ade941857a6a1334845 19987192 mupdf_1.14.0+ds1-4_amd64.deb
Checksums-Sha256:
33cd6aec272780d2a70c8984301f2521bc7a6751429728f64383d91442bb6a30 2168
mupdf_1.14.0+ds1-4.dsc
82a56fa141bd14b3b6de4c1e5dc3ec3b083062822d6088a0111c7b7fadb6e945 31036
mupdf_1.14.0+ds1-4.debian.tar.xz
f424d8821e04bb398947795ba3d78581afcc11ff7a300678000013b9461dcfda 22561944
libmupdf-dev_1.14.0+ds1-4_amd64.deb
93389977d8b640129a89cabef83a79292a23845e58d55da8985b8b7c5068464a 2975772
mupdf-dbgsym_1.14.0+ds1-4_amd64.deb
6a6a02b02b87c08ea60e9be131d001aaf0f70bd5706e3de0c8b260a1e657d63e 3266948
mupdf-tools-dbgsym_1.14.0+ds1-4_amd64.deb
53d1adfb263e988ad2eabbcdf7dea614b07c73e7e8e08911ba92febb3dca9dad 20092868
mupdf-tools_1.14.0+ds1-4_amd64.deb
9633f177f7c375ca6af7d1b8b8bc85644c6a001cff193f206441d6f780ce9346 11586
mupdf_1.14.0+ds1-4_amd64.buildinfo
aeee905d6a9c4a3805f817216a21db53b0e7917f59653ef161a5262ff7a18368 19987192
mupdf_1.14.0+ds1-4_amd64.deb
Files:
5416e591b13cb6ddcb43180b6378fa49 2168 text optional mupdf_1.14.0+ds1-4.dsc
cd57662534c87593eb3e507f5ef7d366 31036 text optional
mupdf_1.14.0+ds1-4.debian.tar.xz
b7dcda04e540c1698cb1104b46d71680 22561944 libdevel optional
libmupdf-dev_1.14.0+ds1-4_amd64.deb
a252ae41036a4648e53975082e252e2b 2975772 debug optional
mupdf-dbgsym_1.14.0+ds1-4_amd64.deb
82bc12611e28bd824090da55657d2be2 3266948 debug optional
mupdf-tools-dbgsym_1.14.0+ds1-4_amd64.deb
d5280027f19d85d4601647e55af15db7 20092868 text optional
mupdf-tools_1.14.0+ds1-4_amd64.deb
d0d39c7c3826febbc73385e7a346c39c 11586 text optional
mupdf_1.14.0+ds1-4_amd64.buildinfo
df1ece695b026166ff867d5b01fca44b 19987192 text optional
mupdf_1.14.0+ds1-4_amd64.deb
-----BEGIN PGP SIGNATURE-----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=CLQx
-----END PGP SIGNATURE-----
--- End Message ---
