On Thu, Jan 12, 2017 at 07:06:55PM +0100, Marius Bakke wrote:
> * gnu/packages/patches/mupdf-mujs-heap-buffer-overflow.patch: New file.
> * gnu/packages/patches/mupdf-mujs-null-pointer-dereference.patch: New file.
> * gnu/local.mk (dist_patch_DATA): Add them.
> * gnu/packages/pdf.scm (mupdf)[source]: Use them.

Thanks!

I'd write it like this, but it's not important:

* gnu/packages/patches/mupdf-mujs-heap-buffer-overflow.patch,
gnu/packages/patches/mupdf-mujs-null-pointer-dereference.patch: New file.

Can you include links to the upstream bug reports in the patch files?

Through cups, this requires ~600 rebuilds. I wonder if we can graft it?
That is, is the ABI compatible?