(cherry picked from commit 3dc0838450) Forward-picking from staging-next. The CVE is marked as critical, and the amount of rebuilds isn't that high (~500 linux, ~100 darwin).
3dc0838450
mupdf doesn't compile with 2.1 due to API changes cc @codyopel who made the openjpeg update