From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: Michael J Gruber <mjg@fedoraproject.org>
To: git-commits@fedoraproject.org
Subject: [rpms/mupdf] rawhide: fix CVE-2026-7233 (rhbz#2463402)
Date: Thu, 16 Jul 2026 08:34:17 GMT
Message-ID: <178419085772.1.3230672862882369038.rpms-mupdf-a10b1a39f605@fedoraproject.org>
List-ID: <git-commits.fedoraproject.org>
X-Git-Repo: rpms/mupdf
X-Git-Branch: rawhide
X-Git-Rev: a10b1a39f605c2b19bde8168930c5de8afe1c013
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