GNU bug report logs - #25935
[PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}.

Previous Next

Full log

View this message in rfc822 format

From: Leo Famulari <leo <at> famulari.name>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: guix-devel <at> gnu.org, 25935 <at> debbugs.gnu.org
Subject: bug#25935: [PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}.
Date: Fri, 3 Mar 2017 04:55:16 -0500

[Message part 1 (text/plain, inline)]

On Fri, Mar 03, 2017 at 02:04:11PM +0800, Alex Vong wrote:
> Leo Famulari <leo <at> famulari.name> writes:
> 
> > On Thu, Mar 02, 2017 at 09:15:29PM +0800, Alex Vong wrote:
> >> This patch (applied to core-updates) fixes the two CVEs disclosed recently.
> >
> > Can you send a patch for the master branch instead? The patches should
> > be applied to mupdf/fixed in (gnu packages pdf).
> 
> Sure, here it is:
> 

> From 24ceef58b2ebb70d45c01e7e1bc43cc2056f8705 Mon Sep 17 00:00:00 2001
> From: Alex Vong <alexvong1995 <at> gmail.com>
> Date: Thu, 2 Mar 2017 19:59:05 +0800
> Subject: [PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}.
> 
> * gnu/packages/patches/mupdf-CVE-2017-5896.patch,
> gnu/packages/patches/mupdf-CVE-2017-5991.patch: New files.
> * gnu/packages/pdf.scm (mupdf/fixed)[source]: Add patches.
> * gnu/local.mk (dist_patch_DATA): Add them.

Thanks, pushed!

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.