Skip to content

[Deepin Integration]~[v25-Release] Auto integrate from topic: mupdf-1.25.1 by @UTsweetyfish to v25-Release by deepin-ci-robot #13806

Description

@deepin-bot

Package information | 软件包信息

包名 版本
mupdf 1.25.1+ds1-6+deb13u1
pymupdf 1.25.4+ds1-3+deb13u1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4456/testing/ ./

Changelog | 更新信息

mupdf (1.25.1+ds1-6+deb13u1) trixie-security; urgency=high

  • Non-maintainer upload by the Security Team.
  • Avoid overflow src_stride calculation in unpack_stream (CVE-2026-3308)
    (Closes: #1133189)

pymupdf (1.25.4+ds1-3+deb13u1) trixie; urgency=medium

  • Backport upstream fix for CVE-2026-3029:
    Improved safety of pymupdf embed-extract. This now refuses to write to
    an existing file or outside current directory, unless -output or new flag
    -unsafe is specified.

Metadata

Metadata

Labels

Type

No type

Projects

Status
In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions