StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · mupdf

`mupdf` CVE matrix across Linux distros

190 CVEs tracked across 8 distro releases. Showing the 190 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2012-5340→ fixed in1.2-2
CVE-2014-2013→ fixed in1.3-2
CVE-2016-10246→ fixed in1.11+ds1-1
CVE-2016-10247→ fixed in1.11+ds1-1
CVE-2016-6265→ fixed in1.9a+ds1-1.1
CVE-2016-6525→ fixed in1.9a+ds1-1.2
CVE-2016-8674→ fixed in1.9a+ds1-2
CVE-2017-14685→ fixed in1.11+ds1-1.1
+35 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y mupdf

Debian bookworm

Source: Debian

CVE-2012-5340→ fixed in1.2-2
CVE-2014-2013→ fixed in1.3-2
CVE-2016-10246→ fixed in1.11+ds1-1
CVE-2016-10247→ fixed in1.11+ds1-1
CVE-2016-6265→ fixed in1.9a+ds1-1.1
CVE-2016-6525→ fixed in1.9a+ds1-1.2
CVE-2016-8674→ fixed in1.9a+ds1-2
CVE-2017-14685→ fixed in1.11+ds1-1.1
+37 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y mupdf

Debian trixie

Source: Debian

CVE-2012-5340→ fixed in1.2-2
CVE-2014-2013→ fixed in1.3-2
CVE-2016-10246→ fixed in1.11+ds1-1
CVE-2016-10247→ fixed in1.11+ds1-1
CVE-2016-6265→ fixed in1.9a+ds1-1.1
CVE-2016-6525→ fixed in1.9a+ds1-1.2
CVE-2016-8674→ fixed in1.9a+ds1-2
CVE-2017-14685→ fixed in1.11+ds1-1.1
+39 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y mupdf

Alpine v3.20

Source: Alpine secdb

CVE-2017-17858→ fixed in1.13-r0
CVE-2017-5896→ fixed in1.10a-r1
CVE-2017-5991→ fixed in1.10a-r2
CVE-2017-6060→ fixed in1.11-r1
CVE-2018-1000051→ fixed in1.13-r0
CVE-2018-5686→ fixed in1.13-r0
CVE-2018-6187→ fixed in1.13-r0
CVE-2018-6192→ fixed in1.13-r0
+3 more in Alpine v3.20

Single command to patch all of these:

apk add --upgrade mupdf

Alpine v3.21

Source: Alpine secdb

CVE-2017-17858→ fixed in1.13-r0
CVE-2017-5896→ fixed in1.10a-r1
CVE-2017-5991→ fixed in1.10a-r2
CVE-2017-6060→ fixed in1.11-r1
CVE-2018-1000051→ fixed in1.13-r0
CVE-2018-5686→ fixed in1.13-r0
CVE-2018-6187→ fixed in1.13-r0
CVE-2018-6192→ fixed in1.13-r0
+3 more in Alpine v3.21

Single command to patch all of these:

apk add --upgrade mupdf

Alpine edge

Source: Alpine secdb

CVE-2017-17858→ fixed in1.13-r0
CVE-2017-5896→ fixed in1.10a-r1
CVE-2017-5991→ fixed in1.10a-r2
CVE-2017-6060→ fixed in1.11-r1
CVE-2018-1000051→ fixed in1.13-r0
CVE-2018-5686→ fixed in1.13-r0
CVE-2018-6187→ fixed in1.13-r0
CVE-2018-6192→ fixed in1.13-r0
+3 more in Alpine edge

Single command to patch all of these:

apk add --upgrade mupdf

Alpine v3.18

Source: Alpine secdb

CVE-2017-17858→ fixed in1.13-r0
CVE-2017-5896→ fixed in1.10a-r1
CVE-2017-5991→ fixed in1.10a-r2
CVE-2017-6060→ fixed in1.11-r1
CVE-2018-1000051→ fixed in1.13-r0
CVE-2018-5686→ fixed in1.13-r0
CVE-2018-6187→ fixed in1.13-r0
CVE-2018-6192→ fixed in1.13-r0
+3 more in Alpine v3.18

Single command to patch all of these:

apk add --upgrade mupdf

Alpine v3.19

Source: Alpine secdb

CVE-2017-17858→ fixed in1.13-r0
CVE-2017-5896→ fixed in1.10a-r1
CVE-2017-5991→ fixed in1.10a-r2
CVE-2017-6060→ fixed in1.11-r1
CVE-2018-1000051→ fixed in1.13-r0
CVE-2018-5686→ fixed in1.13-r0
CVE-2018-6187→ fixed in1.13-r0
CVE-2018-6192→ fixed in1.13-r0
+3 more in Alpine v3.19

Single command to patch all of these:

apk add --upgrade mupdf

Is YOUR mupdf patched?

5-second check on your actual server. The quickscan reads your installed mupdf version and matches against the same 190-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)