[Secure-testing-team] Bug#832031: mupdf: CVE-2016-6265: use-after-free

Salvatore Bonaccorso carnil at debian.org
Thu Jul 21 14:55:40 UTC 2016


Source: mupdf
Version: 1.9a+ds1-1
Severity: important
Tags: security upstream
Forwarded: http://bugs.ghostscript.com/show_bug.cgi?id=696941

Hi,

the following vulnerability was published for mupdf.

CVE-2016-6265[0]:
use-after-free

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-6265
[1] http://bugs.ghostscript.com/show_bug.cgi?id=696941

Please adjust the affected versions in the BTS as needed, only the
unstable version has been checked.

Regards,
Salvatore



More information about the Secure-testing-team mailing list