-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Apr 2026 16:00:06 +0200
Source: mupdf
Architecture: source
Version: 1.25.1+ds1-6+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Kan-Ru Chen (陳侃如) <koster@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1133189
Changes:
 mupdf (1.25.1+ds1-6+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Avoid overflow src_stride calculation in unpack_stream (CVE-2026-3308)
     (Closes: #1133189)
Checksums-Sha1:
 d66356bf488d5e8106ffa8c5ed07a02275700166 2819 mupdf_1.25.1+ds1-6+deb13u1.dsc
 c13f6f52b3418a761864a0fb2a7bf269a32c8f8f 4112784 mupdf_1.25.1+ds1.orig.tar.xz
 b59f1377d5b1b7ad4b91ff1cd82240bb4b2d5a34 94772 mupdf_1.25.1+ds1-6+deb13u1.debian.tar.xz
 525eec2c1ed1596a5fe9a512e62a4106f9036dea 7135 mupdf_1.25.1+ds1-6+deb13u1_source.buildinfo
Checksums-Sha256:
 8d5417060eb0cc4c0ec8f25a18009034f440b62688b8c647172732ccad63a39f 2819 mupdf_1.25.1+ds1-6+deb13u1.dsc
 0c2fb34812a8f470ba4f8581bf1c8fd6de0c31feb64020edd4e541400fce1dc9 4112784 mupdf_1.25.1+ds1.orig.tar.xz
 9dcaeec03493204b647e3d030874cce55f0f69db95235de2cf1405e5d194eeef 94772 mupdf_1.25.1+ds1-6+deb13u1.debian.tar.xz
 3e813d0638854cff1f1b738066be252b8a82f758efb179d012aa044c78967b92 7135 mupdf_1.25.1+ds1-6+deb13u1_source.buildinfo
Files:
 399c4fd1cfed711b8feeac404cfe396c 2819 text optional mupdf_1.25.1+ds1-6+deb13u1.dsc
 fb7865ba2175200dfdc68e2f05ab564b 4112784 text optional mupdf_1.25.1+ds1.orig.tar.xz
 7f708f1a5292194b888cc97c061a3cbb 94772 text optional mupdf_1.25.1+ds1-6+deb13u1.debian.tar.xz
 cfbbf65693e614f2a374d63629e4ca33 7135 text optional mupdf_1.25.1+ds1-6+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=VUVj
-----END PGP SIGNATURE-----