-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 10:53:39 +0200
Source: evince
Binary: evince evince-dbgsym gir1.2-evince-3.0 libevdocument3-4 libevdocument3-4-dbgsym libevince-dev libevview3-3 libevview3-3-dbgsym
Architecture: i386
Version: 43.1-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 evince     - Document (PostScript, PDF) viewer
 gir1.2-evince-3.0 - GObject introspection data for the evince libraries
 libevdocument3-4 - Document (PostScript, PDF) rendering library
 libevince-dev - Document (PostScript, PDF) rendering library - development files
 libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets
Changes:
 evince (43.1-2+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * shell: quote strings in arguments used when calling ev_spawn
     (CVE-2026-46529)
Checksums-Sha1:
 084720cb36465600621c0b3164d644d47e809bce 479408 evince-dbgsym_43.1-2+deb12u1_i386.deb
 d7bc46ba292646c6774c95803eb563c59bdcdfe4 22758 evince_43.1-2+deb12u1_i386-buildd.buildinfo
 8b67d24c170fb8dfff26e0ac97c1e2d984cfaa11 302160 evince_43.1-2+deb12u1_i386.deb
 8d946e8ed4e4bddf6155d08b0c1d33ee4025eda1 32772 gir1.2-evince-3.0_43.1-2+deb12u1_i386.deb
 849e0205a5412b67ab97ff5bbdab8554b74eab0e 448860 libevdocument3-4-dbgsym_43.1-2+deb12u1_i386.deb
 4550787322a5c69d4be34cf9c8038c9ee5d5f6d5 184508 libevdocument3-4_43.1-2+deb12u1_i386.deb
 b6236d410f4ece30038433d756d994f0283e84b5 245992 libevince-dev_43.1-2+deb12u1_i386.deb
 3233a39689afe176fa0dec198aa64e6a37ff861f 385484 libevview3-3-dbgsym_43.1-2+deb12u1_i386.deb
 a040425b8dcefd913b84a453cb0263f7778a1239 153240 libevview3-3_43.1-2+deb12u1_i386.deb
Checksums-Sha256:
 df21d9a379a9640896246bd9b372332710414653451217f7e649dad55ae9f7ab 479408 evince-dbgsym_43.1-2+deb12u1_i386.deb
 3660898a228c1f2bd54546ae8b43243b8ffe0f70ef2dd3af273cbd544f2e19f6 22758 evince_43.1-2+deb12u1_i386-buildd.buildinfo
 a837bc9e991fb967c1e059ac924b7be3d921023ce6d8945559d6040c1c6f84da 302160 evince_43.1-2+deb12u1_i386.deb
 110ab27e8605dab3852728a7d332adce9c6de0c3fab0ef8b396ce8805cd8aaa2 32772 gir1.2-evince-3.0_43.1-2+deb12u1_i386.deb
 43886349c0eccefa293f187276f289cc5f6d63028c1561ac18167d955a4eb8af 448860 libevdocument3-4-dbgsym_43.1-2+deb12u1_i386.deb
 42cd6b580c676554d9853c6cf7410509fb1051e203332c16b1c039410bc462e1 184508 libevdocument3-4_43.1-2+deb12u1_i386.deb
 3f097e3afa68c58bf29e3406a6bac812e663c1ecf93cb80697966c8353522264 245992 libevince-dev_43.1-2+deb12u1_i386.deb
 fcfb0b8b0fff42fc773b33295e667c88521eb9cd4f41b6f4fe1d6a3a75f179db 385484 libevview3-3-dbgsym_43.1-2+deb12u1_i386.deb
 d221095b788670a9b2759ff2274fb4f66a1a67613605493f4fc3cf6edc36db4b 153240 libevview3-3_43.1-2+deb12u1_i386.deb
Files:
 676d3c3a019d59a287dd9dfe42175ea4 479408 debug optional evince-dbgsym_43.1-2+deb12u1_i386.deb
 f653cf9ab0935b865be2e0bf58924a28 22758 gnome optional evince_43.1-2+deb12u1_i386-buildd.buildinfo
 c3e2ce497d1c1cbdf4bc724b5356d560 302160 gnome optional evince_43.1-2+deb12u1_i386.deb
 59882e352f6ab77699edc24f068b7788 32772 introspection optional gir1.2-evince-3.0_43.1-2+deb12u1_i386.deb
 cf65f9a110f08104708b5d9c6d42ca9e 448860 debug optional libevdocument3-4-dbgsym_43.1-2+deb12u1_i386.deb
 a8e0a28b305e43f0e95b75927bddb750 184508 libs optional libevdocument3-4_43.1-2+deb12u1_i386.deb
 66667a2d551cc88cae824b3df290648e 245992 libdevel optional libevince-dev_43.1-2+deb12u1_i386.deb
 b7a4015d90223c4e32930292763f4197 385484 debug optional libevview3-3-dbgsym_43.1-2+deb12u1_i386.deb
 6db50ee0cd2ce556ddef7ffb2d7baf3c 153240 libs optional libevview3-3_43.1-2+deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=/N60
-----END PGP SIGNATURE-----