Package: release.debian.org Severity: normal X-Debbugs-Cc: mupdf@packages.debian.org Control: affects -1 + src:mupdf User: release.debian.org@packages.debian.org Usertags: unblock Please unblock package mupdf [ Reason ] This update backports a denial-of-service fix from upstream (CVE-2025-46206) https://security-tracker.debian.org/tracker/CVE-2025-46206 [ Impact ] Users running mupdf or mutool as a service is vulnerable to remote denial of service attacks via an infinite recursion. [ Tests ] Manually tested with reproducer from upstream. [ Risks ] Upstream fix is relatively simple that targets only the infinite recursion problem, so should not have other unwanted side effects. [ Checklist ] [x] all changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in testing [ Other info ] N/A unblock mupdf/1.25.1+ds1-7
Attachment:
mupdf_1.25.1+ds1-7.debdiff.gz
Description: application/gzip
Attachment:
signature.asc
Description: PGP signature