-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2026 23:52:49 +0100 Source: pymupdf Binary: python3-pymupdf python3-pymupdf-dbgsym Architecture: s390x Version: 1.25.4+ds1-3+deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Bastian Germann Description: python3-pymupdf - Python binding for MuPDF Changes: pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium . * Backport upstream fix for CVE-2026-3029: Improved safety of `pymupdf embed-extract`. This now refuses to write to an existing file or outside current directory, unless `-output` or new flag `-unsafe` is specified. Checksums-Sha1: efa7d72e6c7b2940b7f1c227a2f6a772cbe5e6a1 7610 pymupdf_1.25.4+ds1-3+deb13u1_s390x-buildd.buildinfo c96a5a7533b5efd428e7cf2610318d98f364d0dc 366876 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_s390x.deb c6ef7146b0389592f217076cd9def289e962cd94 326912 python3-pymupdf_1.25.4+ds1-3+deb13u1_s390x.deb Checksums-Sha256: 863aae305a62ac0c31f0bb945ef839b0c8029cac5442a9e2cc69c6efb455bad5 7610 pymupdf_1.25.4+ds1-3+deb13u1_s390x-buildd.buildinfo 593b8508dfc656a76f498e61c36a07cc2a84309e3e481d9e02af8f213b8ce540 366876 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_s390x.deb 1baef924a6c3ed9a96f02fc1dab71741f1fccf4555baf924b27161f670bfd1fe 326912 python3-pymupdf_1.25.4+ds1-3+deb13u1_s390x.deb Files: 33466e257e380eb08f35ffac482bfd1a 7610 python optional pymupdf_1.25.4+ds1-3+deb13u1_s390x-buildd.buildinfo 6546a56f20ef0ebb5446b8d06542a031 366876 debug optional python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_s390x.deb 673672beb23ec1da224ed2482991e922 326912 python optional python3-pymupdf_1.25.4+ds1-3+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmnQIAUACgkQMWUFebkH noSZ2xAAnZJwojeKSlsgWzOpRAQSfh2tw9ZtpLv9QOKb8unYaUdeScUyt6O8jQDp RG+aqfPKIRyB4eytve/i32WvGqVJlbLRDJJuCSg0w3OcZoTnNq7o1s2a9iSdhes/ Fo7mhExcEXrKzmEK/iL/hOuyBDYE001mkhZLorzx535G1KhrphZ83SacO8nmWbqG 0nGv4OpUDe5rqKycWx9/CheX10SUEyZ9T9DpRY6knX0/vC/7YDeq9LWRYim4DbQ7 u73Fzwagzbz78jVwnA5lQnfS5K20eBT49CZsbg63I0hFLFmyq2KPpm9+X6ycSrbL e1k4gu3QnEvWT9446KX03aSvbVoco2JJTIlUzOx2N6bX1JCKOXe7BdmBnxf85WCy orOFeBA+qF0PcOWzWDEncU++44OxeawNVKpN21EAzMeLSvgItBlU+jXQJRAxst7v xGZNW0I6Pv9BVQKtuy4OmrevTHFllxnGlCgzOz7vCcT4Q9FNzV6N264qr5eNeQeF FheiRtYTQqR8ddRh388TdGOJ5+R/SsZax5K+H4pAd1pZ31uQUEO8D3CBxn0Ri5Ic Is1RpgQ38KS8kpaK6+1UexQDLBvqSNNub9ktA36XibU+3AyPMn0E6xN5eE3KYUSz bOc4r8/JL5VfPl47QPZtouCxQIzW07626BJxI05cOAvLtRJC7j0= =bHNd -----END PGP SIGNATURE-----