Sign me up Login

Details about package mupdf

Name:	mupdf (PTS)
Uploader:	Bastian Germann <bastiangermann@fishpost.de> (Debian QA page)
Description:	libmupdf-dev - development files for the MuPDF viewer mupdf - lightweight PDF viewer mupdf-tools - command line tools for the MuPDF viewer

Package uploads

Upload #2

Information

Version:	1.14.0+ds1-4+deb10u3
Uploaded:	2021-03-15 21:05
Source package:	mupdf_1.14.0+ds1-4+deb10u3.dsc
Distribution:	stable-proposed-updates
Section:	text
Priority:	optional
Homepage:	http://mupdf.com/
Vcs-Git:	https://salsa.debian.org/koster/mupdf.git
Vcs-Browser:	https://salsa.debian.org/koster/mupdf
Closes bugs:	#983684

Changelog

 mupdf (1.14.0+ds1-4+deb10u3) stable-proposed-updates; urgency=high
 .
   * Non-maintainer upload.
   * Avoid a use-after-free in fz_drop_band_writer (CVE-2020-16600)
   * Fix double free of object during linearization (CVE-2021-3407)
     (Closes: #983684)

QA information

–
Package uses debhelper

Debhelper compatibility level 9

–

Newer upstream version available

local:	1.14.0+ds1
upstream:	1.18.0
url:	http://mupdf.com/downloads/archive/mupdf-1.18.0-source.tar.xz

–
Package is not native

format: 3.0 (quilt)
–
The uploader is not in the package's "Maintainer" or "Uploaders" fields
User email

bastiangermann@fishpost.de

"Maintainer" email

koster@debian.org

"Uploaders" emails
- afelion@gmail.com
–
Package has lintian warnings
mupdf source
- W changelog-file-missing-explicit-entry
  - 1.14.0+ds1-4+deb10u2 -> 1.14.0+ds1-4 (missing) -> 1.14.0+ds1-4+deb10u3
- W package-uses-deprecated-debhelper-compat-version
  - 9
- W source-nmu-has-incorrect-version-number
  - 1.14.0+ds1-4+deb10u3
- I debian-watch-uses-insecure-uri
  - http://mupdf.com/downloads/
- I older-debian-watch-file-standard
  - 3
- I out-of-date-standards-version
  - 4.3.0 (released 2018-12-23) (current is 4.5.1)
- I patch-not-forwarded-upstream
  - debian/patches/0001-mupdf_manpage.patch
  - debian/patches/0003-Sort-files-in-static-library-to-make-the-build-repro.patch
  - debian/patches/0005-MuPDF-crossbuild-use-host-cc-for-utils.patch
  - debian/patches/0006-Allow-disabling-objcopy.patch
  - debian/patches/0008-PATCH-Fix-700043-Don-t-assume-a-font-is-t3-just-beca.patch
  - debian/patches/0009-PATCH-Bug-700442-Add-a-recursion-depth-check-to-prev.patch
  - debian/patches/0013-Fix-typo-in-pdf-write-device.patch
- I unused-file-paragraph-in-dep5-copyright
  - paragraph at line 191
- I wildcard-matches-nothing-in-dep5-copyright
  - resources/fonts/han/*.otf (line 191)
  - source/fitz/strtod.c (line 142)
- X debian-watch-does-not-check-gpg-signature
- X upstream-metadata-file-is-missing
- P maintainer-desktop-entry
  - debian/mupdf.desktop
- P package-lacks-versioned-build-depends-on-debhelper
  - 9
- P silent-on-rules-requiring-root
- P trailing-whitespace
  - debian/changelog (line 30)
–
Package closes bugs in a wrong way
Errors:
- Bug #983684 is closed
- src:mupdf:
  - #983684 (Serious): mupdf: CVE-2021-3407
–
Package is already in Debian
- Detected as a non-maintainer upload
- The package uploader is not currently maintaining mupdf in Debian
- Last upload was on the 2021-03-14

–

d/copyright is in DEP5 format

author:	http://mupdf.com/
licenses:	RSA-MD5, Apache-2.0, BSD-1-clause, GPL-2+, OFL-1.1, Adobe-BSD-3-clause, AGPL-3+, public-domain, BSD-3-clause, ISC, MIT/Lucent

Comments

No comments

Upload #1

Information

Version:	1.14.0+ds1-4+deb10u3
Uploaded:	2021-02-25 13:20
Source package:	mupdf_1.14.0+ds1-4+deb10u3.dsc
Distribution:	stable-proposed-updates
Section:	text
Priority:	optional
Homepage:	http://mupdf.com/
Vcs-Git:	https://salsa.debian.org/koster/mupdf.git
Vcs-Browser:	https://salsa.debian.org/koster/mupdf

Changelog

 mupdf (1.14.0+ds1-4+deb10u3) stable-proposed-updates; urgency=high
 .
   * Non-maintainer upload.
   * Avoid a use-after-free in fz_drop_band_writer (CVE-2020-16600)

QA information

–
Package uses debhelper

Debhelper compatibility level 9

–

Newer upstream version available

local:	1.14.0+ds1
upstream:	1.18.0
url:	http://mupdf.com/downloads/archive/mupdf-1.18.0-source.tar.xz

–
Package is not native

format: 3.0 (quilt)
–
The uploader is not in the package's "Maintainer" or "Uploaders" fields
User email

bastiangermann@fishpost.de

"Maintainer" email

koster@debian.org

"Uploaders" emails
- afelion@gmail.com
–
Package has lintian warnings
mupdf source
- W changelog-file-missing-explicit-entry
  - 1.14.0+ds1-4+deb10u2 -> 1.14.0+ds1-4 (missing) -> 1.14.0+ds1-4+deb10u3
- W package-uses-deprecated-debhelper-compat-version
  - 9
- W source-nmu-has-incorrect-version-number
  - 1.14.0+ds1-4+deb10u3
- I debian-watch-uses-insecure-uri
  - http://mupdf.com/downloads/
- I older-debian-watch-file-standard
  - 3
- I out-of-date-standards-version
  - 4.3.0 (released 2018-12-23) (current is 4.5.1)
- I patch-not-forwarded-upstream
  - debian/patches/0001-mupdf_manpage.patch
  - debian/patches/0003-Sort-files-in-static-library-to-make-the-build-repro.patch
  - debian/patches/0005-MuPDF-crossbuild-use-host-cc-for-utils.patch
  - debian/patches/0006-Allow-disabling-objcopy.patch
  - debian/patches/0008-PATCH-Fix-700043-Don-t-assume-a-font-is-t3-just-beca.patch
  - debian/patches/0009-PATCH-Bug-700442-Add-a-recursion-depth-check-to-prev.patch
  - debian/patches/0013-Fix-typo-in-pdf-write-device.patch
- I unused-file-paragraph-in-dep5-copyright
  - paragraph at line 191
- I wildcard-matches-nothing-in-dep5-copyright
  - resources/fonts/han/*.otf (line 191)
  - source/fitz/strtod.c (line 142)
- X debian-watch-does-not-check-gpg-signature
- X upstream-metadata-file-is-missing
- P maintainer-desktop-entry
  - debian/mupdf.desktop
- P package-lacks-versioned-build-depends-on-debhelper
  - 9
- P silent-on-rules-requiring-root
- P trailing-whitespace
  - debian/changelog (line 28)
–
Package is already in Debian
- Detected as a non-maintainer upload
- The package uploader is not currently maintaining mupdf in Debian
- Last upload was on the 2020-12-03

–

d/copyright is in DEP5 format

author:	http://mupdf.com/
licenses:	RSA-MD5, Apache-2.0, BSD-1-clause, GPL-2+, OFL-1.1, Adobe-BSD-3-clause, AGPL-3+, public-domain, BSD-3-clause, ISC, MIT/Lucent

Comments

No comments