On Thu, Mar 02, 2017 at 09:15:29PM +0800, Alex Vong wrote:
> This patch (applied to core-updates) fixes the two CVEs disclosed recently.

Can you send a patch for the master branch instead? The patches should
be applied to mupdf/fixed in (gnu packages pdf).