-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 20 Jun 2026 16:39:11 +0300
Source: nbconvert
Binary: jupyter-nbconvert python-nbconvert-doc python3-nbconvert
Architecture: all
Version: 7.16.6-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 jupyter-nbconvert - Jupyter notebook conversion (scripts)
 python-nbconvert-doc - Jupyter notebook conversion (documentation)
 python3-nbconvert - Jupyter notebook conversion (Python 3)
Closes: 1134889 1134890
Changes:
 nbconvert (7.16.6-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-39377: Arbitrary File Write via Path Traversal in
     Cell Attachment Filenames (Closes: #1134889)
   * CVE-2026-39378: Arbitrary File Read via Path Traversal in
     HTMLExporter Image Embedding (Closes: #1134890)
Checksums-Sha1:
 5873d2fa5cf24279b57298b89f95e2b4f33f5dd6 31452 jupyter-nbconvert_7.16.6-1+deb13u1_all.deb
 03f55cf8f5ade709983a640c9a05bf64d06e3b4d 12053 nbconvert_7.16.6-1+deb13u1_all-buildd.buildinfo
 82f19c993d055c8244b5d86414256fbdd039880f 1813520 python-nbconvert-doc_7.16.6-1+deb13u1_all.deb
 466fb37ff090f2a5d56548126c8880e5c863dfcf 160536 python3-nbconvert_7.16.6-1+deb13u1_all.deb
Checksums-Sha256:
 6de19efe76c5a7a5e309fc9e648f18d975b2fc51992af46502274d0291a478b0 31452 jupyter-nbconvert_7.16.6-1+deb13u1_all.deb
 907d5a9cf87afebca32c85214b367d95bf6e8dc85b8e2c170d4cf7e1bcaf6d1f 12053 nbconvert_7.16.6-1+deb13u1_all-buildd.buildinfo
 69d0da300d31b0e3b0bc66c85307896dba5d5c10c774095d88d7a24f8c1e2ca0 1813520 python-nbconvert-doc_7.16.6-1+deb13u1_all.deb
 581b5dc792c977aea492e21aaf70cbf463e7daad5380415a5ecb79e98b964389 160536 python3-nbconvert_7.16.6-1+deb13u1_all.deb
Files:
 edb3db1ac721655cc47206af3f6112cf 31452 utils optional jupyter-nbconvert_7.16.6-1+deb13u1_all.deb
 126f39f74f25ffd64c2f5ac82532c3e5 12053 python optional nbconvert_7.16.6-1+deb13u1_all-buildd.buildinfo
 9616505dad850ed702eab48fb05f4e33 1813520 doc optional python-nbconvert-doc_7.16.6-1+deb13u1_all.deb
 5530d579e4b80e64b6644d612b3e68a4 160536 python optional python3-nbconvert_7.16.6-1+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=D1dW
-----END PGP SIGNATURE-----