-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 22 Mar 2026 23:52:49 +0100
Source: pymupdf
Binary: python3-pymupdf python3-pymupdf-dbgsym
Architecture: riscv64
Version: 1.25.4+ds1-3+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-03) <buildd_riscv64-rv-manda-03@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-pymupdf - Python binding for MuPDF
Changes:
 pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium
 .
   * Backport upstream fix for CVE-2026-3029:
     Improved safety of `pymupdf embed-extract`. This now refuses to write to
     an existing file or outside current directory, unless `-output` or new flag
     `-unsafe` is specified.
Checksums-Sha1:
 41f3802830c4eb7e3403406f258fd15654d70b74 7692 pymupdf_1.25.4+ds1-3+deb13u1_riscv64-buildd.buildinfo
 d15890fa4fea4fea27a9b2476f081b668aec3ce3 351884 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_riscv64.deb
 ec6e2d1a56f431d7894c3b66bf4bc53d65a03241 331656 python3-pymupdf_1.25.4+ds1-3+deb13u1_riscv64.deb
Checksums-Sha256:
 8c628e0d6a538f28523b57b64096c3553cccf82e757b47eb90f72314e2436df7 7692 pymupdf_1.25.4+ds1-3+deb13u1_riscv64-buildd.buildinfo
 c47e2e2064fa5a5a59f4078a4cd83f39477249447748857dcca50102066cb938 351884 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_riscv64.deb
 ae1b249384618fa879be49c6419ed765e46c7a42225f44195a2b0751c0eabcbc 331656 python3-pymupdf_1.25.4+ds1-3+deb13u1_riscv64.deb
Files:
 a219d3f6520b518a91d65c3805643d58 7692 python optional pymupdf_1.25.4+ds1-3+deb13u1_riscv64-buildd.buildinfo
 670ce81151b717677fb60f121e1aedb8 351884 debug optional python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_riscv64.deb
 2cbdb9d5d55b5fd816148564ecaf1848 331656 python optional python3-pymupdf_1.25.4+ds1-3+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=816z
-----END PGP SIGNATURE-----