Your message dated Fri, 30 Mar 2018 19:49:18 +0000 with message-id <e1f201w-0004p4...@fasolo.debian.org> and subject line Bug#891245: fixed in mupdf 1.9a+ds1-4+deb9u3 has caused the Debian Bug report #891245, regarding CVE-2018-6544 / CVE-2018-1000051 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 891245: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891245 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: mupdf Version: 1.11+ds1-2 Severity: grave Tags: security Please see https://security-tracker.debian.org/tracker/CVE-2018-1000051 https://security-tracker.debian.org/tracker/CVE-2018-6544 Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: mupdf Source-Version: 1.9a+ds1-4+deb9u3 We believe that the bug you reported is fixed in the latest version of mupdf, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 891...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Thorsten Alteholz <deb...@alteholz.de> (supplier of updated mupdf package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Mar 2018 19:03:02 +0100 Source: mupdf Binary: libmupdf-dev mupdf mupdf-tools Architecture: source amd64 Version: 1.9a+ds1-4+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Kan-Ru Chen (陳侃如) <kos...@debian.org> Changed-By: Thorsten Alteholz <deb...@alteholz.de> Description: libmupdf-dev - development files for the MuPDF viewer mupdf - lightweight PDF viewer mupdf-tools - command line tools for the MuPDF viewer Closes: 891245 Changes: mupdf (1.9a+ds1-4+deb9u3) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2018-6544, CVE-2018-1000051 add patches to fix use after free (Closes: #891245) Checksums-Sha1: afc494552ea7c6ea08bc1b846a1f7f105df78cb2 2340 mupdf_1.9a+ds1-4+deb9u3.dsc 2699c33ddc8f33819cd0791f3762a3a268873286 13325139 mupdf_1.9a+ds1.orig.tar.gz 8dacfcaae746ae330ff22551a1be0ef9cdc93d4b 31144 mupdf_1.9a+ds1-4+deb9u3.debian.tar.xz 10538cf6915166d9847c06eeb5b4ef5c608971d6 7299194 libmupdf-dev_1.9a+ds1-4+deb9u3_amd64.deb 75618934c391b9b5081dac18a66977455cf4fa27 2143884 mupdf-dbgsym_1.9a+ds1-4+deb9u3_amd64.deb 40d0e563bb7bd8fe63bd08b0efaff0c7295bf57c 2400160 mupdf-tools-dbgsym_1.9a+ds1-4+deb9u3_amd64.deb 0d2244905f55f7b503a6db6a4fb74874e1208576 6910214 mupdf-tools_1.9a+ds1-4+deb9u3_amd64.deb 92e52bda7ba194da0834329ea3e68783475e7252 8891 mupdf_1.9a+ds1-4+deb9u3_amd64.buildinfo 352faf5ba416d838cbb6af3a7ef8c39ccb300075 6858952 mupdf_1.9a+ds1-4+deb9u3_amd64.deb Checksums-Sha256: c33949fc1a23e0b0624443d3f5d42d7126fa521d82bbedcf5bbfd80cffdab62f 2340 mupdf_1.9a+ds1-4+deb9u3.dsc 1b5d6126472f99ae2c99f1b474169b752764d63a90d3dd6e6a6f8fac8cdd0b75 13325139 mupdf_1.9a+ds1.orig.tar.gz 79c3943eb80eb3284a50662fde12dc38c5aa6af7acd07dcea7ef402e56fd0783 31144 mupdf_1.9a+ds1-4+deb9u3.debian.tar.xz 473e993793199c0aa3456f0987fb5f3d9f16092386d1e6ea34743a39a18d22ad 7299194 libmupdf-dev_1.9a+ds1-4+deb9u3_amd64.deb b7b4666838cbccaefa5f523be274a0ca052df8cb6316d6d9bdf40cfcc59e3bd5 2143884 mupdf-dbgsym_1.9a+ds1-4+deb9u3_amd64.deb 1ce0f0f25626407cae57798e4ef8d682ac1ea6468325cad9b5ccbf42fc49e79f 2400160 mupdf-tools-dbgsym_1.9a+ds1-4+deb9u3_amd64.deb 15f90950e1596a294875426c1b5d43baf0aa95007e6bc2489f10297e30c5c2ca 6910214 mupdf-tools_1.9a+ds1-4+deb9u3_amd64.deb 06a44759c85c8d1d17975689ea2309f98358445ef32e64b783df5def88e9e3dc 8891 mupdf_1.9a+ds1-4+deb9u3_amd64.buildinfo b8a590fe5d2fe05d2f97cd516d508d4222046d77696d800f0c262acf118eef3d 6858952 mupdf_1.9a+ds1-4+deb9u3_amd64.deb Files: 8481059cdb18a460c6899db39f6e363f 2340 text optional mupdf_1.9a+ds1-4+deb9u3.dsc 62e41e176d501171476cf4f6a03d8306 13325139 text optional mupdf_1.9a+ds1.orig.tar.gz 2627b1754973895e7793992d787ade3e 31144 text optional mupdf_1.9a+ds1-4+deb9u3.debian.tar.xz d5091816724a7726d8124252d28ff0fa 7299194 libdevel optional libmupdf-dev_1.9a+ds1-4+deb9u3_amd64.deb f2449ba1e05e606af447acf774fb5f84 2143884 debug extra mupdf-dbgsym_1.9a+ds1-4+deb9u3_amd64.deb c0f78c820070325f85e53612fb6ddcf3 2400160 debug extra mupdf-tools-dbgsym_1.9a+ds1-4+deb9u3_amd64.deb 680682c71c6216d6db19e8ed9b191729 6910214 text optional mupdf-tools_1.9a+ds1-4+deb9u3_amd64.deb 6f304a5645ed02e26f0d76023b7023dc 8891 text optional mupdf_1.9a+ds1-4+deb9u3_amd64.buildinfo 89154092347f00684ab68ded51e8759e 6858952 text optional mupdf_1.9a+ds1-4+deb9u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlq5MaxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR7MxD/0VtwvE9CqoZWKscVKr3cL+dHsihiix W0Y8TXUcFBIQcIZNlLHSCwLHb7oDIt9YQMOY50JVslJ4I/GU5BmE2jtUVOwj7smr 0Sy9tNmuUF03q/mA5FopiNSM8SX3FLb2hey1VdyyhdA3UCGsSq2v/+k+2FsT7dgg Hy18hMCnWrBtv5FZxy+/habytuaBCPyLYJ9ZnM+QnvVeWd4v5FYR0B3VN9T5HQIf M/lYJDE4F46Ug9m8eLsxqaquYjINV6jqft54pNcgbjf7X03as8aJtuUpuYEf7vxC 34c0uGpYD8vIb0c9oQ9YMO3/W8T2TJiUg7Rhl+R+YsFjNgmlBsxaHPtmV8axPTEg 3RAEkYDx0ZQOvwuvi+snWIkWweF4vWu7bTQgJsjQ6DepfqBPUXovhDytfiEJSpt0 cGQLSi5JDSbPeeneBfRoZPVEsThdVkIbycEPF8aSEG0BvdFOs3NKtJG6u0wqe2HD iWd2u348U5q+uVKSncduh6SIr3AMpnDXv/FDHVv8wGpB+aZgCTgfCeMO5RT8X8i7 QpHQfzx131nq7JL2JRV/s8cGIyRYNhTgh9vMhWerEnR7znUTCZVdmrMZzTkpPsXR 7GkD0Op7XgDm2H8sw+vNo3Xb0GFO0zOJdmCnUlwpiDKGJ7s8O+6J+jnlsKvTOiim WfRVuugVy/QQ2A== =wi2l -----END PGP SIGNATURE-----
--- End Message ---
