-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Apr 2026 16:00:06 +0200 Source: mupdf Binary: libmupdf-dev libmupdf25.1 libmupdf25.1-dbgsym mupdf mupdf-dbgsym mupdf-tools mupdf-tools-dbgsym python3-mupdf python3-mupdf-dbgsym Architecture: i386 Version: 1.25.1+ds1-6+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Salvatore Bonaccorso Description: libmupdf-dev - development files for the MuPDF viewer libmupdf25.1 - shared library for the MuPDF viewer mupdf - lightweight PDF viewer mupdf-tools - command line tools for the MuPDF viewer python3-mupdf - Python bindings for MuPDF library Closes: 1133189 Changes: mupdf (1.25.1+ds1-6+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Avoid overflow src_stride calculation in unpack_stream (CVE-2026-3308) (Closes: #1133189) Checksums-Sha1: 71f208d75de6e58cc0dfaac4c66055ade6f50e3d 265432 libmupdf-dev_1.25.1+ds1-6+deb13u1_i386.deb bca98e02b37ece3d5d0dd0804f85ef2324dcc0a6 4208988 libmupdf25.1-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb d2457669ccefb0b5ab974deb6be9565c4e7f5b79 30778596 libmupdf25.1_1.25.1+ds1-6+deb13u1_i386.deb a316bc027bd0972fc89837dc14db1b19d2a1720a 245148 mupdf-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 4d4556a5346a3b2eeaf554413b5929ab9e54c7b0 420616 mupdf-tools-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 2d1639d1018bd60f2c95cb43452e0209cbe3f48c 203148 mupdf-tools_1.25.1+ds1-6+deb13u1_i386.deb c97f1be60dca9499d92c6cf57f105b4d01aef572 16226 mupdf_1.25.1+ds1-6+deb13u1_i386-buildd.buildinfo 28140dc2e2af62c0b25ce8c3b3be42487114893d 1894016 mupdf_1.25.1+ds1-6+deb13u1_i386.deb dfb4553145fb5d5759c1faf87b413048ee373a13 11282940 python3-mupdf-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb b03ee49bfcbe337c6fae42980019b592f38e3f52 1865648 python3-mupdf_1.25.1+ds1-6+deb13u1_i386.deb Checksums-Sha256: eb059c5e10d948872ce00d13c5b0770d348fb0532621be15c469ce3628c6741b 265432 libmupdf-dev_1.25.1+ds1-6+deb13u1_i386.deb 77f5c272a135549cc1f262cb2a667e2f381c064e0e0ae0d933b6e0903f4f0285 4208988 libmupdf25.1-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb fb0296a055a4641081a315e019a3824f0322131ca213ca5d5447a934de86384c 30778596 libmupdf25.1_1.25.1+ds1-6+deb13u1_i386.deb d33755310dc4131689edbb59e27055b942b8dfc7f6c9411f0cf693a32931fcc6 245148 mupdf-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 3231d03b4f7ef2d34596565d9bdb1f5e18ee682c5571626df27d97107420a254 420616 mupdf-tools-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 0f362eb1475fa66944a266b8fe8493223a09370989ddb380daf8d998399815a7 203148 mupdf-tools_1.25.1+ds1-6+deb13u1_i386.deb 3f062f697ae002845e301d9b6f45a5279e822d2d4c20f8aba56403ffb3f1a864 16226 mupdf_1.25.1+ds1-6+deb13u1_i386-buildd.buildinfo bdbf0025555ca504df60314b0a65fdedcb74e888508f0a03407bf3066eeeb41e 1894016 mupdf_1.25.1+ds1-6+deb13u1_i386.deb 334594750dea2bb2cab369adc374f02ae240b78f1a75c8a7e1bc08e5d75bb43e 11282940 python3-mupdf-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 48fe0253dec42fc487c33fadb8744fe5773ce712952ef610d486b3f587a2096a 1865648 python3-mupdf_1.25.1+ds1-6+deb13u1_i386.deb Files: 8cc566d18e6c6ea6d6575d03564faa5e 265432 libdevel optional libmupdf-dev_1.25.1+ds1-6+deb13u1_i386.deb 171309f51b87096ae837c792b4c310be 4208988 debug optional libmupdf25.1-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb c1d104e1fddd4b38b1f2269c3afd6afe 30778596 libs optional libmupdf25.1_1.25.1+ds1-6+deb13u1_i386.deb 92bdade894fb9366878a518d3076b408 245148 debug optional mupdf-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 6162556977a33feb447ea34357c8fffe 420616 debug optional mupdf-tools-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 2252833da20cfc3a1184fdcadc22045b 203148 text optional mupdf-tools_1.25.1+ds1-6+deb13u1_i386.deb 70d8a2bbf4f24c52ff3c3b8c69c3d572 16226 text optional mupdf_1.25.1+ds1-6+deb13u1_i386-buildd.buildinfo 1bdc1fbfee3076c1ce283d6e592e33e6 1894016 text optional mupdf_1.25.1+ds1-6+deb13u1_i386.deb 3369b64ade6e966d92f88e23175c47f4 11282940 debug optional python3-mupdf-dbgsym_1.25.1+ds1-6+deb13u1_i386.deb 91831515f2c1a78a9a58dfa362f82a2c 1865648 text optional python3-mupdf_1.25.1+ds1-6+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmniUXwACgkQGNGWmfrq ILFxBg//SAR9Kvl5yWF/GKR6gh4FOgrugQT/mFInNQRpHatXGmQnoeMgmtlOZSZc xPB8JPwlAzoU0bufitj8H8SdpNODLp8T6aCe8QRZdQZy2RrIHBphG0NblBskXgWf 3eMLegPzYf/HuLbE91BVYHBN9a4TojjusQ9F+e5W+Ep/eZX8Q7morW1o3t6TAc49 ZseNJrKSBkb8kj2tNbjsJng3g2TZQ87PnWVIE1c8+++GZcij5ByTC7RRI5kLM3KY PjGSaTFSge6/fxUNmPJ5Y1jlHM7S6HiJLDm7c2C8m7p6dJppZ8hrTPkBhmcUM3y9 bnBMGKgAHZaFzfj7JwgYsZsaJsQ27zgwkWUhYsCJF1felNpr2BBudKmgnULs3/kO KzBWRjpFrkUHpa6sj+MEthoYcD8OmQbdDDaDmbB6TH+QYipyW349N1JAMT82X2JP ubWsk5ZGYRgFCChKYAUVmQzBFYswzh+JjACKa0x0HzV9+ST+qEHNp5loUA1zsuxc XTP9aEN+FI+mTtlsTNHX3X0ragSNJm5EZ/NrlVfU+2ZcydMuzai727iKKpMndgjZ V6QC1VJVyGY7awRDSNXVtlZfWJ0yoxE4M+GYMkVAs3uZymlfylOwlnOzcv3OMBuZ yq/UzQiy1nt6DF6LfHUZHZ3m/7BBlbfPZkzjySZ4lFP+uolHa/U= =htrC -----END PGP SIGNATURE-----