Re: [PATCH] gnu: mupdf: Fix some security problems in bundled mujs.

[Leo Famulari]

On Thu, Jan 12, 2017 at 07:59:40PM -0500, Mark H Weaver wrote:
> Here's what we can do: in addition to mupdf itself, we can also add a
> graft for cups-filters (our only package that includes mupdf as an
> input).  The replacement for cups-filters would change its mupdf input
> to refer directly to the fixed version of mupdf.
> 
> What do you think?

I've attached two patches that should do this.

0001-gnu-mupdf-Fix-CVE-2016-10132-10133-in-bundled-mujs.patch
Description: Text document

0002-gnu-cups-filters-Fix-CVE-2016-10132-10133-in-statica.patch
Description: Text document

signature.asc
Description: PGP signature