-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2026 23:52:49 +0100 Source: pymupdf Binary: python3-pymupdf python3-pymupdf-dbgsym Architecture: ppc64el Version: 1.25.4+ds1-3+deb13u1 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Bastian Germann Description: python3-pymupdf - Python binding for MuPDF Changes: pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium . * Backport upstream fix for CVE-2026-3029: Improved safety of `pymupdf embed-extract`. This now refuses to write to an existing file or outside current directory, unless `-output` or new flag `-unsafe` is specified. Checksums-Sha1: 9a5f923e6d519efeff3bf1e4788a9d403a23f4ac 7747 pymupdf_1.25.4+ds1-3+deb13u1_ppc64el-buildd.buildinfo 82730682ae1d9363cc353c7ae7d443de5d96e0e6 373952 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_ppc64el.deb b896863f98c8a4024b03308b5fbbec5ef2d85210 335432 python3-pymupdf_1.25.4+ds1-3+deb13u1_ppc64el.deb Checksums-Sha256: a63746adcaf1896873d3a380822e5008ae39c3c122667ce9dbca4f25303c231a 7747 pymupdf_1.25.4+ds1-3+deb13u1_ppc64el-buildd.buildinfo 2c2e88b8c3677d412468134008fe63af69f02a186622f9d5e9420969c63b252c 373952 python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_ppc64el.deb 7e54de6ff45f192796e4165463207172d5458a7f00c6526662f45ad0989e1d7f 335432 python3-pymupdf_1.25.4+ds1-3+deb13u1_ppc64el.deb Files: 3ab448e8827221fd7c6c51d038ec269e 7747 python optional pymupdf_1.25.4+ds1-3+deb13u1_ppc64el-buildd.buildinfo 60a462d731bad1039309f6dbe8b4b1b5 373952 debug optional python3-pymupdf-dbgsym_1.25.4+ds1-3+deb13u1_ppc64el.deb 74589dc2f200419eecc7ed81bb77591b 335432 python optional python3-pymupdf_1.25.4+ds1-3+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmnQHqYACgkQOrVShFbI MGG8gw//a2DZJdXy0OlSpGlb7IbrXSCF8RnqtmeMBpvv45S/EgPXJa+4Y71DQNlH siyl09ddkSLd3VjWZxZU8zgyr/TiikpCa69YLeo/3aLOs8zAkZrcBZQIJ6kxW8et Y1amHSPXoVO6fkbeLuNR+yNJiI0CGIqTHpfJW7yy0XuV39jh93EB7pXN5W6xoyfu FNDJMFTgaPV7gf2HQqIuUR929ydoXKGNagwEkdr0v5jpGrth+U89TPEFYaFTIkLj teCmbXvFTv5e3fGC4rHOC71Yq0XS0G7a/GM2nXHxsZrF4voBpG7Ek0CM8adMdGDi fY1uAap018EEAeJ6QGd3G4+OZfkLxb2L0AYw0OqMoMWHfYqryrbVog6V9MQCKHwf aPKnwjZGu5epfL1nI12C8GCMh/ZjVyf6AOBV2aWX1TJSiw8Q9Xx6WZAsbtgFoai8 VtD+WJkwUUGC0iQK3OuuisaOR0IcRuEFC3n0XprXt9CvOBRD8BdmoNKIwCPlhm2V Urm1s7YN2lPKcCoA2AiWA4Y0jb8DSV9Il722D4hDqI/QL9hpwaib6s5nAHNFlRpQ Qkx7n4atsv2Am26+Whpmh4EKsRoLPmPuKJCMeCj8J0cDyT1H7/jbc5pAPimIyR7F pUD0K+J6xoKlFCbbn89WRS8r3E8Gux27fx9niEhBwYbKj8A6ToY= =WTOq -----END PGP SIGNATURE-----