-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Nov 2025 22:53:52 +0100
Source: pdfminer
Architecture: source
Version: 20221105+dfsg-1.1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1120642
Changes:
pdfminer (20221105+dfsg-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Fix: arbitary code execution when loading pickle font files (CVE-2025-64512)
(Closes: #1120642)
Checksums-Sha1:
35a783efe879269bd4bafe582c7980e2bf18cdbc 2508 pdfminer_20221105+dfsg-1.1.dsc
ba3609cf8086e9ffc81be43742cd7e3862d33ccc 12724 pdfminer_20221105+dfsg-1.1.debian.tar.xz
740b552a4bbf1255622838e4daa932a8238e5107 7239 pdfminer_20221105+dfsg-1.1_source.buildinfo
Checksums-Sha256:
5f1cb5fe5fe43700552c7f0d8b84a34bef8ed3097d1d7658260799eb3db28c08 2508 pdfminer_20221105+dfsg-1.1.dsc
f7a40c2cdedfe4dc6d2337aec802f2cdf0d6cb50cb1837d4e6ae4184a9b95c38 12724 pdfminer_20221105+dfsg-1.1.debian.tar.xz
b3a6f659e9cfd03eb5df54c68f4c32cfd85c01c2202ba6f6d759a513ae2512dd 7239 pdfminer_20221105+dfsg-1.1_source.buildinfo
Files:
cd2dfe98939c60dc8bd768e4c18ea2a3 2508 python optional pdfminer_20221105+dfsg-1.1.dsc
fafa134c6435fefd87bdf5608925f3d5 12724 python optional pdfminer_20221105+dfsg-1.1.debian.tar.xz
30ec5475fd564faba450b534e014559b 7239 python optional pdfminer_20221105+dfsg-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=i+vN
-----END PGP SIGNATURE-----
Attachment:
pgpivUNmyJOMA.pgp
Description: PGP signature