-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 10:53:39 +0200
Source: evince
Binary: evince evince-dbgsym gir1.2-evince-3.0 libevdocument3-4 libevdocument3-4-dbgsym libevince-dev libevview3-3 libevview3-3-dbgsym
Architecture: armhf
Version: 43.1-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 evince     - Document (PostScript, PDF) viewer
 gir1.2-evince-3.0 - GObject introspection data for the evince libraries
 libevdocument3-4 - Document (PostScript, PDF) rendering library
 libevince-dev - Document (PostScript, PDF) rendering library - development files
 libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets
Changes:
 evince (43.1-2+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * shell: quote strings in arguments used when calling ev_spawn
     (CVE-2026-46529)
Checksums-Sha1:
 3ef732e4ceff8d6103bae27389be7a44ae2b4605 578896 evince-dbgsym_43.1-2+deb12u1_armhf.deb
 030e0e853e245f01f6df1f7b2435415d45495fdf 22882 evince_43.1-2+deb12u1_armhf-buildd.buildinfo
 7c614a5bfb6df9efd1ee13fccc0bb1dbfdb6e9a5 259216 evince_43.1-2+deb12u1_armhf.deb
 3064a2a803b50f9e58f55edb9dc52b8661abf5e0 32780 gir1.2-evince-3.0_43.1-2+deb12u1_armhf.deb
 e0fc4975d7431e2950e2aea95aa85cd7b0fc4ca2 499292 libevdocument3-4-dbgsym_43.1-2+deb12u1_armhf.deb
 4e4222538790ded8663aee50cff01e957f2ffbc2 144740 libevdocument3-4_43.1-2+deb12u1_armhf.deb
 52a5344b8e5112675bf4ac0ac44dfb803faf5ee0 246032 libevince-dev_43.1-2+deb12u1_armhf.deb
 8bb11d3bdcba5452f6b27c014a36cd59e048e697 447480 libevview3-3-dbgsym_43.1-2+deb12u1_armhf.deb
 a96de382d9f77e6e126a0f43fc6be08ca1e5ece4 115512 libevview3-3_43.1-2+deb12u1_armhf.deb
Checksums-Sha256:
 e6ca68e1fdc11200aa38453be4f3b4fa9e3608e89b54cb56543e8982b88c17bf 578896 evince-dbgsym_43.1-2+deb12u1_armhf.deb
 6a668d9932f6298b025fba3dfb2a9a5fdd018658dd6784b9ac0686994283b425 22882 evince_43.1-2+deb12u1_armhf-buildd.buildinfo
 89dee1b35bcee9211d267edfd566350b1cdc44899c1183a4b7a9218fff087756 259216 evince_43.1-2+deb12u1_armhf.deb
 b831ccc371c9cf8c832887bbab520a6b1d6aa33f761908a446640bf864ad88b1 32780 gir1.2-evince-3.0_43.1-2+deb12u1_armhf.deb
 ef2afe958c4eabe0c36553bf5b46760324ff78e846c007de7305361181bbdb11 499292 libevdocument3-4-dbgsym_43.1-2+deb12u1_armhf.deb
 6c36ef08e356f32eb32202a6e8e841fac6b0acd004c644357ced1b01f5fc8088 144740 libevdocument3-4_43.1-2+deb12u1_armhf.deb
 32a74e82490ed83b4c66b82e242de69978eea685dc8388ee959b7b1fea3d8d9e 246032 libevince-dev_43.1-2+deb12u1_armhf.deb
 073758e44ee0211723e8df537b8c42a87bfac5b29a46efbc9b3264859c8f3c74 447480 libevview3-3-dbgsym_43.1-2+deb12u1_armhf.deb
 ba5cd54035ea151dddcca59fe5b2f3cbc9e948bc30b93b59a2dc14a11e3f5f49 115512 libevview3-3_43.1-2+deb12u1_armhf.deb
Files:
 9e4c27f6bc42ebb1f254e9d1c931defa 578896 debug optional evince-dbgsym_43.1-2+deb12u1_armhf.deb
 327911744e775c887035c64e8d771b27 22882 gnome optional evince_43.1-2+deb12u1_armhf-buildd.buildinfo
 462e4f85aae20e101bc5b5bcee2ee56a 259216 gnome optional evince_43.1-2+deb12u1_armhf.deb
 dcc0fac7a08f67dd3d4e1c62e86435f1 32780 introspection optional gir1.2-evince-3.0_43.1-2+deb12u1_armhf.deb
 c400f263048ac2df59190c1f102b1cc9 499292 debug optional libevdocument3-4-dbgsym_43.1-2+deb12u1_armhf.deb
 245ec9058e1de3ac5bfce34fb11d2dd3 144740 libs optional libevdocument3-4_43.1-2+deb12u1_armhf.deb
 b4e80028dc999a3afa3e8d624f1f0063 246032 libdevel optional libevince-dev_43.1-2+deb12u1_armhf.deb
 1c9f24ca9844ec97e0210d42e344c74e 447480 debug optional libevview3-3-dbgsym_43.1-2+deb12u1_armhf.deb
 22185ef11a026895fefcf7a3a63bcbae 115512 libs optional libevview3-3_43.1-2+deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=gELq
-----END PGP SIGNATURE-----