-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 Apr 2026 20:10:33 -0500 Source: mupdf Architecture: source Version: 1.27.0+ds1-5 Distribution: unstable Urgency: medium Maintainer: Kan-Ru Chen (陳侃如) <koster@debian.org> Changed-By: Daniel Echeverri <epsilon@debian.org> Closes: 1134199 Changes: mupdf (1.27.0+ds1-5) unstable; urgency=medium . * debian/patches + Fix CVE-2026-40505 (Closes: #1134199) + ANSI injection in mutool via crafted PDF metadata fields. Checksums-Sha1: 3e84275e4699dd38b6c1748df6fe1cc16e13cde5 2773 mupdf_1.27.0+ds1-5.dsc 87db7b235702d659887bbe232058f7cee6bb106f 107828 mupdf_1.27.0+ds1-5.debian.tar.xz ba091b3e5ce43c10c052774834016dc77827c631 17179 mupdf_1.27.0+ds1-5_amd64.buildinfo Checksums-Sha256: 2f69812d3453f478af6e12a98e3153e4a12cdd32bd11708bd37935ca3e93c8c7 2773 mupdf_1.27.0+ds1-5.dsc 30dcbe717533a9e55830009903ca5b7decca9c89818936e08dc05779ef1887fc 107828 mupdf_1.27.0+ds1-5.debian.tar.xz 1d880f14ef55965dc63fdaecb757d418c2fa4016e36433dec03625486b9bfbeb 17179 mupdf_1.27.0+ds1-5_amd64.buildinfo Files: 0b3e7d56fea1cf9047341eee3740ee29 2773 text optional mupdf_1.27.0+ds1-5.dsc a013f0f2326af039f8fff4a8bfc1a534 107828 text optional mupdf_1.27.0+ds1-5.debian.tar.xz 00917f8ae9099b568091806840972034 17179 text optional mupdf_1.27.0+ds1-5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEE0NCFsWnDv9lASFj6IfwpUEtSMNsFAmnlptoTHGVwc2lsb25A ZGViaWFuLm9yZwAKCRAh/ClQS1Iw2+T1D/oCIF8V1B9KV2whG/h54QaHgUUjKiP7 jeRwn0+JfRpfw1ph7QEaoG9tmGTUq4RROKYQJ3LEfDQovFT2MG/Os6SQXb/n/pkO YTnNGP5uUWIz1QQLgc3LgzFiE6AdViTkUGJUaj+0pPTYm6T5ZoEYZYEiknE+Omsz 0b9CGyseUI85CDARltuzjWFIsal7e8tz4JD0FBn/e4Geulzs6ZEijzuQMjLgdc6w /NOO0R5kwXez+7uyTNr373Rq2o0R4gp+kd2ClrUTYzmAMYnXPmTK22IcbjBUe9Ib RKjgCGAXGrbgTts8aJ91dIOQoP7Pf6bltEcXqy8ROcRWtcqif2Q/6+FH3TF1Luku dOm71dwQW0SGZUu3gSvLaFIaoggiqOYYvi8scgR7uSRoIk8V7rq97a53C3Sys0ik raVpvVboISoN0fJWVFfLiwTJCsfw5vZuQY7IY5h2c/0VIalEtdhpsp9J8LCWVS/+ hvoSWxA15oNTZBT5x9F6Vl7Xb3WFEzPIuVRlMw/j8/QuCTOahqvFV/XQnVUE38Nq 3/ToXuOPZOEadT1qLlUVk7Ofv2ik6pdA2qmNwFt++gxYxKIBSp8J3XCZ07sdD3bg k3DsOMfuInnKom2zQkABuhrfKa4NCRQteKwOTpfhNdBbAdwP/0vaYY3cGjrXIey6 wNonMVqr0i8K2A== =bIsG -----END PGP SIGNATURE-----