UbuntuUpdates.org

Package "mupdf"

Name: mupdf

Description:

lightweight PDF viewer
Latest version: 1.25.1+ds1-5ubuntu0.1
Release: plucky (25.04)
Level: security
Repository: universe
Homepage: https://mupdf.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "mupdf"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "mupdf" in Plucky

Repository Area Version
base universe 1.25.1+ds1-5build2
updates universe 1.25.1+ds1-5ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.25.1+ds1-5ubuntu0.1 2025-11-25 19:07:35 UTC

  mupdf (1.25.1+ds1-5ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Denial of Service via infinite recursion
    - debian/patches/CVE-2025-46206.patch: Add checks to detect cycles in
      strip_outlines and strip_outline using pdf mark bits.
    - debian/patches/CVE-2025-46206-2.patch: Fix cycle detection in
      pdf_rearrange_pages
    - CVE-2025-46206

 -- Shishir Subedi <email address hidden> Wed, 12 Nov 2025 15:12:36 +0545
CVE-2025-46206 An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool clean` utilit


About   -   Send Feedback to @ubuntu_updates