On 19/02 13:53, Bastian Germann wrote: > * Package name : mupdf > Version : 1.14.0+ds1-4+deb10u3 > [...] > * Avoid a use-after-free in fz_drop_band_writer (CVE-2020-16600) Hi Bastian, thanks for your work on this. We think this update should go via stable-proposed-updates: https://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable Cheers, -- Seb