-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2026 23:52:49 +0100 Source: pymupdf Binary: python3-fitz Architecture: all Version: 1.25.4+ds1-3+deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Bastian Germann Description: python3-fitz - Python binding for MuPDF (forward compatibility name) Changes: pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium . * Backport upstream fix for CVE-2026-3029: Improved safety of `pymupdf embed-extract`. This now refuses to write to an existing file or outside current directory, unless `-output` or new flag `-unsafe` is specified. Checksums-Sha1: cef779c4a0e46a441b2e56f1a0cdd068cc71a2e0 7377 pymupdf_1.25.4+ds1-3+deb13u1_all-buildd.buildinfo ebe38d23f6097d825336ffa69f9926832e0188f8 67596 python3-fitz_1.25.4+ds1-3+deb13u1_all.deb Checksums-Sha256: 61f922a4ef361654720c9d1b3f3001eb296c0bf77c53b7b2d7d81f786001b9c5 7377 pymupdf_1.25.4+ds1-3+deb13u1_all-buildd.buildinfo 86f6ffe73b8143c18b75ca32ebadac53abd00cbdc478d750f3ce582d45ab66af 67596 python3-fitz_1.25.4+ds1-3+deb13u1_all.deb Files: be363560f76221734efcf31cbfd8d2cb 7377 python optional pymupdf_1.25.4+ds1-3+deb13u1_all-buildd.buildinfo 6126417a8ca2c33e46613ce21a9099a1 67596 python optional python3-fitz_1.25.4+ds1-3+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmnQHIsACgkQaBVi67oX tfne+xAAmUs0oA9Nbm3Tl+0xKY5AmA9MIljlvuBP8oLSpoPLs6coJtrPeFDdMU03 Auw/XfFiBqX2mDmFHAz4xBg4fKw9pB0Xmc1s0t5xkZO+CWhD6xiCWaUXg/yGK70k 7ac9/Is+0yroQcjsYGiN7lKvC8pgJof3j8UMp4M5TL5XwbcJF4Erfqpu8H+BNOFa FvBYSobVH0AW9B1aBvzFQDZpw0eui+Jz1F4SPd82rSnlsBNdDrQ4yKPlHa95h/9i M63RlFKfl15zu0mBb7s4LOseLB7GkC5H8uXNJyMUvpryOVlTpjqCftl12jV7JAWa 8kQO9oq/Lit4d0B7qe5JeLz8Djxht10He6S9i1tSHU4iz0usBnSeP6XVy3nUldi/ LLqhAJ4uYCkHD3ZH2lxbwLeUi60mHE2SQ3lQZ7Q+KRnN/56n9XDt65vFO3BObGLh GTD4cLOYWxhDOmerPRjQCVRyI+72OV1BB7O5RZNr3LRLseKh7yrEwA/fZF1J2DuI wSknC7OY4hrFAgLrg6Skbg/gAuwC2UsrTKhbtqa/RtgNCjQKKU5mJm0Y3UXhw9fX g9qrpBCbcv9UBzLGD0aMfzLyObq+3fV+nRJ5MThbcvGo4SncsB7xzqYoqENsjLK6 CRYikZGLPEVjURy/BFdqFuFM0y69KV8hekPIYCVVWiOmstTlKYk= =bVuo -----END PGP SIGNATURE-----