Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bump to upstream tag debian/3.5.27.1-14, which includes fixes for
numerous security issues:
293 Segmentation fault when trying to open a djvu file with djview4
https://sourceforge.net/p/djvu/bugs/293/
fix: 8407dd3421f720ab2e1a61e3f1e60e08967f98db
295 Invalid Memory Read when calling read_tiff
https://sourceforge.net/p/djvu/bugs/295/
fix: 23522feec1e200cd2981c8e063ce1ea3a333a14f
302 out-of-bounds write in function DJVU::DjVuTXT::decode at DjVuText.cpp:348-20
https://sourceforge.net/p/djvu/bugs/302/
fix: 7b0ef20690e08f1fe124aebbf42f6310e2f40f81
309 DJVU::filter_fv@IW44EncodeCodec.cpp:499-43___SEGV_UNKNOW
https://sourceforge.net/p/djvu/bugs/309/
fix: c8bec6549c10ffaa2f2fbad8bbc629efdf0dd125
Bug 718552: CVE-2019-1514{2..5}
Bug 536720: insecure use of /tmp