-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 22 Mar 2026 23:52:49 +0100
Source: pymupdf
Binary: python3-pymupdf python3-pymupdf-dbgsym
Architecture: i386
Version: 1.25.4+ds1-3+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-pymupdf - Python binding for MuPDF
Changes:
 pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium
 .
   * Backport upstream fix for CVE-2026-3029:
     Improved safety of `pymupdf embed-extract`. This now refuses to write to
     an existing file or outside current directory, unless `-output` or new flag
     `-unsafe` is specified.
Checksums-Sha1:
 454d9edb48ef5a16d53e01454d14adc0581eff01 7649 pymupdf_1.25.4+ds1-3+deb13u1_i386-buildd.buildinfo
 86193a6986cda8cd32107f8c797ba181f93f80fc 385240 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_i386.deb
 294a28bc71112b1a12b87880fe3d8ea0f3802b99 336336 python3-pymupdf_1.25.4+ds1-3+deb13u1_i386.deb
Checksums-Sha256:
 8ef3bfbdb191dd6153aedf24561a3a36d1f59a1a8431090b33bee8b664785296 7649 pymupdf_1.25.4+ds1-3+deb13u1_i386-buildd.buildinfo
 7f313a97a11919e4d20b4d3d747fb69117f0ffeba22a2fba39612dcf2b2b46cb 385240 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_i386.deb
 4fc86211c30b1e5645ff1e7a8ecf9cf97d1449ba42cc1fc05c8921edc250860c 336336 python3-pymupdf_1.25.4+ds1-3+deb13u1_i386.deb
Files:
 c2dc51e7e44ffc628f71075485053aea 7649 python optional pymupdf_1.25.4+ds1-3+deb13u1_i386-buildd.buildinfo
 a73c11efc64d4c264a2b908fd0c79e90 385240 debug optional python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_i386.deb
 74d4264ed40541f4c3a59e0842d6abf9 336336 python optional python3-pymupdf_1.25.4+ds1-3+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=cTI8
-----END PGP SIGNATURE-----