Your message dated Sun, 15 Oct 2017 15:38:35 +0000 with message-id <e1e3kzr-0008tj...@fasolo.debian.org> and subject line Bug#877379: fixed in mupdf 1.11+ds1-1.1 has caused the Debian Bug report #877379, regarding CVE-2017-14685 / CVE-2017-14686 / CVE-2017-14687 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 877379: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877379 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: mupdf Version: 1.11+ds1-1 Severity: grave Tags: security Hi, please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14685 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14686 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14687 which contains further descriptions and links to upstream fixes. Can you please also prepare updates for stretch-security/jessie-security? Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: mupdf Source-Version: 1.11+ds1-1.1 We believe that the bug you reported is fixed in the latest version of mupdf, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 877...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <car...@debian.org> (supplier of updated mupdf package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Oct 2017 10:37:23 +0200 Source: mupdf Binary: libmupdf-dev mupdf mupdf-tools Architecture: source Version: 1.11+ds1-1.1 Distribution: unstable Urgency: medium Maintainer: Kan-Ru Chen (陳侃如) <kos...@debian.org> Changed-By: Salvatore Bonaccorso <car...@debian.org> Closes: 877379 Description: libmupdf-dev - development files for the MuPDF viewer mupdf - lightweight PDF viewer mupdf-tools - command line tools for the MuPDF viewer Changes: mupdf (1.11+ds1-1.1) unstable; urgency=medium . * Non-maintainer upload. * Don't use xps font if it could not be loaded (CVE-2017-14685) (Closes: #877379) * Check name, comment and meta size field signs (CVE-2017-14686) (Closes: #877379) * Handle non-tags in tag name comparisons (CVE-2017-14687) (Closes: #877379) Checksums-Sha1: ec41dd2f4d1ecd3d0e0974bc7ac7cc2d8ed84153 2316 mupdf_1.11+ds1-1.1.dsc 2f4d9fcde11d09058834c6b34eac0d06821ec9f0 26408 mupdf_1.11+ds1-1.1.debian.tar.xz Checksums-Sha256: 77bd9843f4c442b99f4e98d7605fb9139fb8e2c38d710ef7fd9b8dc96475a04b 2316 mupdf_1.11+ds1-1.1.dsc cb274532e34f818b2f1871fee6303cfffda37251937dd7d731a898b2ca736433 26408 mupdf_1.11+ds1-1.1.debian.tar.xz Files: 630593b9756c7076c81053da26132a5e 2316 text optional mupdf_1.11+ds1-1.1.dsc 4bf112ceea37740d8ee71510228692c3 26408 text optional mupdf_1.11+ds1-1.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlnhupRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Etf4P/1LVBMWOoVlpO4KTy/6xy7z03+hwrpQo sJdPo+s8v9G4+kXCUBUZh4kKz3D8HxUBR2kg5c3IVd01gXFctM+lyNJwtm5UgxBW ZMNRc1Qjm0MMJW1t1qlnXlcxPy35hkSDsAGQs7L/haZXn6fnfLSNtvPl21xYHHDw /jNBGwgMIo9MXKftY6cBzAOspD2Z8jOa/f3LSEb6fiBmp8kkOz+KTRpZqkYgXvN8 VtelaPjSb81+VFu5lcZ0BFqWToQJDtNXAh1ZiADSxs4umeTW0hOVOwSDo+FZflCG t9kDkBuiRxk1m0KUvPjH9+lAK0EMY9N0k/g8SsKh3ZGQ+OKnMJBst59OQyjbPnlI Ha5THFoPbc+b6A2mSTTl+wMDyM6e/hTJmkhpku1DKo9UXk5jefUbuM4mBli+5bwM u0V07OlIFaFZenv3ppMGQk2vPHwk9Xs+38eP7Wrx8To+CyyYbd6UUH46Yj8/NZnM lruaUC65XRRTR7WUQ0Jug5TXIjH2pRyyk22GH/4lC/6S0xd6Vfb5vUZBKReCOJ1z 5iE02l7uuDbom3fABipI+DH5Mx/R1vfN56PBD2dYAj3vjsJK2yswBid75V598wiL M0CKXIU6b8vaVBdGx0TgEIwMLvR+UL8ONGRzpS0jZbE6cBfsa1x1ODqt/F5hwHHD FnFaxjkD21ZH =5Ehs -----END PGP SIGNATURE-----
--- End Message ---
