From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: Michael J Gruber <mjg@fedoraproject.org>
To: git-commits@fedoraproject.org
Subject: [rpms/mupdf] f43: fix CVE-2026-7233 (rhbz#2463402)
Date: Thu, 16 Jul 2026 09:52:48 GMT
Message-ID: <178419556814.1.6540763430501050050.rpms-mupdf-92991ae4935d@fedoraproject.org>
List-ID: <git-commits.fedoraproject.org>
X-Git-Repo: rpms/mupdf
X-Git-Branch: f43
X-Git-Rev: 92991ae4935d70613b86cf1cc8f8c68ccd3d1659
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