Ubuntu alert USN-7888-1 (mupdf)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7888-1] MuPDF vulnerabilities
Date:
             
 
Wed, 26 Nov 2025 04:37:39 +0000
Message-ID:
             
 
<E1vO7Hf-0005wb-QI@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7888-1
November 25, 2025

mupdf vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in MuPDF.

Software Description:
- mupdf: A lightweight open source software framework for viewing and converting PDF, XPS, and
E-book documents

Details:

It was discovered that MuPDF could be made to divide by zero. An attacker
could possibly use this issue to cause a denial of service.
(CVE-2023-51103, CVE-2023-51104, CVE-2023-51105, CVE-2023-51106)

It was discovered that MuPDF incorrectly handled memory under certain
circumstances, which could lead to a NULL pointer dereference. An
attacker could potentially use this issue to cause a denial of service.
(CVE-2024-46657)

It was discovered that MuPDF could enter an infinite recursion when
parsing certain PDF files. An attacker could possibly use this issue to
cause a denial of service. (CVE-2025-46206)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  mupdf                           1.25.1+ds1-5ubuntu0.1
  mupdf-tools                     1.25.1+ds1-5ubuntu0.1

Ubuntu 24.04 LTS
  mupdf                           1.23.10+ds1-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  mupdf-tools                     1.23.10+ds1-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  mupdf                           1.19.0+ds1-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  mupdf-tools                     1.19.0+ds1-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  mupdf                           1.16.1+ds1-1ubuntu1+esm2
                                  Available with Ubuntu Pro
  mupdf-tools                     1.16.1+ds1-1ubuntu1+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  mupdf                           1.12.0+ds1-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  mupdf-tools                     1.12.0+ds1-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7888-1
  CVE-2023-51103, CVE-2023-51104, CVE-2023-51105, CVE-2023-51106,
  CVE-2024-46657, CVE-2025-46206

Package Information:
  https://launchpad.net/ubuntu/+source/mupdf/1.25.1+ds1-5ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=eo5c
-----END PGP SIGNATURE-----