GNU bug report logs - #25935
[PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}.

Previous Next

Full log

Message #19 received at 25935-done <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 25935-done <at> debbugs.gnu.org
Subject: Re: bug#25935: [PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}.
Date: Sat, 11 Mar 2017 17:37:23 +0800

[Message part 1 (text/plain, inline)]

Leo Famulari <leo <at> famulari.name> writes:

> On Fri, Mar 03, 2017 at 02:04:11PM +0800, Alex Vong wrote:
>> Leo Famulari <leo <at> famulari.name> writes:
>> 
>> > On Thu, Mar 02, 2017 at 09:15:29PM +0800, Alex Vong wrote:
>> >> This patch (applied to core-updates) fixes the two CVEs disclosed recently.
>> >
>> > Can you send a patch for the master branch instead? The patches should
>> > be applied to mupdf/fixed in (gnu packages pdf).
>> 
>> Sure, here it is:
>> 
>
>> From 24ceef58b2ebb70d45c01e7e1bc43cc2056f8705 Mon Sep 17 00:00:00 2001
>> From: Alex Vong <alexvong1995 <at> gmail.com>
>> Date: Thu, 2 Mar 2017 19:59:05 +0800
>> Subject: [PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}.
>> 
>> * gnu/packages/patches/mupdf-CVE-2017-5896.patch,
>> gnu/packages/patches/mupdf-CVE-2017-5991.patch: New files.
>> * gnu/packages/pdf.scm (mupdf/fixed)[source]: Add patches.
>> * gnu/local.mk (dist_patch_DATA): Add them.
>
> Thanks, pushed!

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.