-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 10:53:39 +0200 Source: evince Binary: evince evince-dbgsym gir1.2-evince-3.0 libevdocument3-4 libevdocument3-4-dbgsym libevince-dev libevview3-3 libevview3-3-dbgsym Architecture: arm64 Version: 43.1-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: evince - Document (PostScript, PDF) viewer gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets Changes: evince (43.1-2+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * shell: quote strings in arguments used when calling ev_spawn (CVE-2026-46529) Checksums-Sha1: 1dc3ee2b521cd093fa1e6147a31816097ef5ffd5 588224 evince-dbgsym_43.1-2+deb12u1_arm64.deb 7cef3b1b5e9b39a63a67cbc145bbacbdefa58f7b 22972 evince_43.1-2+deb12u1_arm64-buildd.buildinfo 36af7dc88124941b3997e904eface36a5287bcff 272368 evince_43.1-2+deb12u1_arm64.deb 6b221386c6ff74cdc15735cb27e1a6fdc69e20ef 32796 gir1.2-evince-3.0_43.1-2+deb12u1_arm64.deb a08e0146bbe3efa46a9e7e77cec253bdef5ece98 518820 libevdocument3-4-dbgsym_43.1-2+deb12u1_arm64.deb d787b35a0ff5be6f5973db3d965dd435ee79ad77 162692 libevdocument3-4_43.1-2+deb12u1_arm64.deb 9770728f96c7504071f9d1430d950630d7b6861f 245988 libevince-dev_43.1-2+deb12u1_arm64.deb 9f6c5fbf4d20b69d9ee10b699a3af2fcaf5564e0 446220 libevview3-3-dbgsym_43.1-2+deb12u1_arm64.deb af20ceb7ab1e35c8a0297736607a9703bb29db03 125044 libevview3-3_43.1-2+deb12u1_arm64.deb Checksums-Sha256: a5369ea50048d3a715117c7aeae93f0a8b9412e87d29ff3b2e4fe1fe30bc6b99 588224 evince-dbgsym_43.1-2+deb12u1_arm64.deb 5fddb216cb220333817f226e565d313704fa939ca2f61b41eec788e4aacd3089 22972 evince_43.1-2+deb12u1_arm64-buildd.buildinfo e0c83c187fb3d5defdda1e7c6615692dcc7895096fb8dc778c3371f9447d6976 272368 evince_43.1-2+deb12u1_arm64.deb 25718bab256597bcef76e466c35ff36672341ee2b28fa8b2e9af21c920e44657 32796 gir1.2-evince-3.0_43.1-2+deb12u1_arm64.deb 0d70c316815fbf04426d3ddb0bd811d0e98d70af9153343f342c316fff2a2284 518820 libevdocument3-4-dbgsym_43.1-2+deb12u1_arm64.deb b0ea4d9aeabd298bd6cc922d97bee3f8532113b162f1a9777d00b81553834392 162692 libevdocument3-4_43.1-2+deb12u1_arm64.deb 597277faf20bd248c9cfee10eec9f5c544e8fbac5932bda3da8c1cc05483ad04 245988 libevince-dev_43.1-2+deb12u1_arm64.deb d688d65bd6e2ff728147d382dfb5cacc11449b7865623bd2d3feab280cf5e4a6 446220 libevview3-3-dbgsym_43.1-2+deb12u1_arm64.deb 0aff9e2fb29a2dfa89ea7648b9d8a304fcd107941ecd2a82447dc6df29808d16 125044 libevview3-3_43.1-2+deb12u1_arm64.deb Files: 1a40935119ef951b272436fef8b036cf 588224 debug optional evince-dbgsym_43.1-2+deb12u1_arm64.deb a72b11fac03ec2e0a4aa10f343970592 22972 gnome optional evince_43.1-2+deb12u1_arm64-buildd.buildinfo d6b0e900223e8e348a6ac1df8a76c320 272368 gnome optional evince_43.1-2+deb12u1_arm64.deb e55fb87f112b4a19892a34028f0dba1c 32796 introspection optional gir1.2-evince-3.0_43.1-2+deb12u1_arm64.deb 5f93fb72965569d2c5213a69f349023b 518820 debug optional libevdocument3-4-dbgsym_43.1-2+deb12u1_arm64.deb 8301a8d593dc413fa30a03265b322969 162692 libs optional libevdocument3-4_43.1-2+deb12u1_arm64.deb 376370383d18da13b7a93cd2e7143805 245988 libdevel optional libevince-dev_43.1-2+deb12u1_arm64.deb 8dab92a5d7371b8a277d6129efba1328 446220 debug optional libevview3-3-dbgsym_43.1-2+deb12u1_arm64.deb bd3872596c411e284f57377cb9cc4337 125044 libs optional libevview3-3_43.1-2+deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmoNm3UACgkQScpU3dYu lLgIaQ/7B5+vB9ouu/Uk7MKaoUaPC1YfU/Bl4VWckcTou+UcHVmtv1pFFdkiJjZY Gwkbbv8E/RMSAyXUivvNiM4CAcHxyd2iW0aqbkud255BkaO++6Tbjoe5byPvLnpk p9mgoIxYyBTa7XCzv3btyEjVaBCfOHHKvJHHsLzZNc0xfokLnZ35BMGzTmgEDFXw 87p4EuboWZ3SFlrVZtN74YTkA/E4RWamL6LniqvBNKFE+4fhPbNl0L+Eo0MX+1Xo 56cIIb5+nHbObQUJozbL+bulWfm4FKmhWp3vxokpFlcA3cKG5w2t3Db2EXx+u16d uj7mQYzMPsotqasug1i2R4Ej+n4kCUuFmR3Sy8lJZuyqdVznOBP50Db9+CuGNs/+ I1MkrfFiXJnSYw7Gov6dFN4cQeiRxFUjyE3p3pi3FfRomhVdB7mhrUW05/wNnzzP UC878A7m4gNhjwgdJXAv/GRmoSQh1IRgCvAyT2QLwFTGMFIQ1CpIS11SDNLzxYKV eOX+/V5WwRb1EwrqFZAuEbSd3hbbvfTpUnewb80Xm/cpBYx9zqm9cJyg8/A9GtP+ 1tyt9CPH5qQFwDwbPGrKEB5H/ugDhYfLb30fJoHH8MpfGKH81w9osqvt0kVf2mP+ SMZjxaJTFH+LqlELqIM4R4WOLcBjiDUaVUv3skYXofV5OcLMfik= =yzDU -----END PGP SIGNATURE-----