Leo Famulari <leo@famulari.name> writes:

> On Thu, Mar 02, 2017 at 09:15:29PM +0800, Alex Vong wrote:
>> This patch (applied to core-updates) fixes the two CVEs disclosed recently.
>
> Can you send a patch for the master branch instead? The patches should
> be applied to mupdf/fixed in (gnu packages pdf).

Sure, here it is: