-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2026 23:52:49 +0100 Source: pymupdf Binary: python3-pymupdf python3-pymupdf-dbgsym Architecture: armel Version: 1.25.4+ds1-3+deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Bastian Germann Description: python3-pymupdf - Python binding for MuPDF Changes: pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium . * Backport upstream fix for CVE-2026-3029: Improved safety of `pymupdf embed-extract`. This now refuses to write to an existing file or outside current directory, unless `-output` or new flag `-unsafe` is specified. Checksums-Sha1: 3da6b63f598957a16e48d180ee2371c078402b8f 7600 pymupdf_1.25.4+ds1-3+deb13u1_armel-buildd.buildinfo af258eb5a37b626d068b8bee43dc2c0e5b91fa85 392960 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_armel.deb f5b6804edd8f5c93376d6b5307bb69c00e00e522 323148 python3-pymupdf_1.25.4+ds1-3+deb13u1_armel.deb Checksums-Sha256: c16155eddc25e9114c6c455610a429965bd03c8f701fc4f17d29411e9f2e847e 7600 pymupdf_1.25.4+ds1-3+deb13u1_armel-buildd.buildinfo 852d7f93096b188d486e499882e25cfbbf598b9eeed01fd2ca307ce528c68e45 392960 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_armel.deb f23cce04595a52d29c4ae1e857b044ff90a998a99372d3bc1dc0274c5b95a5b9 323148 python3-pymupdf_1.25.4+ds1-3+deb13u1_armel.deb Files: 1a3fd9f8e6c1a86da2f13f8a93e41333 7600 python optional pymupdf_1.25.4+ds1-3+deb13u1_armel-buildd.buildinfo 3c47296813f227a148a92426319f43fb 392960 debug optional python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_armel.deb 85a5dadcf417ef0bdd71c917f3fd9a2d 323148 python optional python3-pymupdf_1.25.4+ds1-3+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmnQIEAACgkQG5VHrWJm wgfdchAAs9JClZUvk5cSZO7S+vOsLUJiz9tX7+B7bUrb8S7Ghwgfw1N4lAsidEaH mSdoZefPU2i71PNAMsJvdZVv4me4BkvvBDapgvJ+HrCDJxKfU4mxez9fE8oN9KmU 48S0mvkdgHOla2Uz2Mn140m9vhGTJILso1WLoHU2S8bC4IxIlLxdSqGH4E9k5e4E hxMh3svFeZRfNougjW2H0la2gk+fQ6lFS90CZNYe1CPBFNwF7rWz3f0vI2w6Sk/H XchAUXUf1Ql8wX4oCij8/iYzQsL7TT/8uMLdMQoqMXbfOoIWMW6LaqaAaXCmpO6v VLi3kg3s0tEijUVuMKHbmNMl6odXp7yktQP3HQllBww3Br6k470eIobZZ/Vtba9H lYopNqgG/8XCRBxhfjmjZapJhvq2/aoca+Y1zbIXbM+pdfaDIxkDvPASHe1NxlBr TFIfviCKefE9g187IKbq65aMftHbc/FTCIeOAY3GafEvqHcm2srOlQeMjl8RL54f IL0aX+7K+D/dvMfHfTQ78POwpAPWzYZPGj8TEi4m2pwi6lYO6MqsPFa5K8nt6XnM eRQBueDq4fVSm78NDugkCz4rVP+MT7zE3qNMx9iE8BmhTRb2Te1CdsbFWq7Dvljq u+cqw9RgKBo8jk1wv5VQY4Awkh3flfXyY6ZrCyw/3aWFcwbzgzg= =VeWm -----END PGP SIGNATURE-----