-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 10:53:39 +0200
Source: evince
Binary: evince evince-dbgsym gir1.2-evince-3.0 libevdocument3-4 libevdocument3-4-dbgsym libevince-dev libevview3-3 libevview3-3-dbgsym
Architecture: amd64
Version: 43.1-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 evince     - Document (PostScript, PDF) viewer
 gir1.2-evince-3.0 - GObject introspection data for the evince libraries
 libevdocument3-4 - Document (PostScript, PDF) rendering library
 libevince-dev - Document (PostScript, PDF) rendering library - development files
 libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets
Changes:
 evince (43.1-2+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * shell: quote strings in arguments used when calling ev_spawn
     (CVE-2026-46529)
Checksums-Sha1:
 ad2574a903f1327566ce370c731afa4b87422c17 586496 evince-dbgsym_43.1-2+deb12u1_amd64.deb
 ed214a127bcb9e5936bf96706418b528ecbe6011 22885 evince_43.1-2+deb12u1_amd64-buildd.buildinfo
 862e0cedd2440fe61eedb9649a9474dca8ea56cd 286264 evince_43.1-2+deb12u1_amd64.deb
 104c4933cca5dcc2a78cfc9cd2eeac5cb218c116 32816 gir1.2-evince-3.0_43.1-2+deb12u1_amd64.deb
 dd6dee05ba03e3418d4d1a1ee9f7240f47b476fe 522016 libevdocument3-4-dbgsym_43.1-2+deb12u1_amd64.deb
 9a888afc3c30e51c70032639cc554509df432aa4 173668 libevdocument3-4_43.1-2+deb12u1_amd64.deb
 51bf79f6cee252acd8cc2761feb62c26c199cbc8 246012 libevince-dev_43.1-2+deb12u1_amd64.deb
 888be73e61a361e851a73fe723fd51b75b6e7c9c 447720 libevview3-3-dbgsym_43.1-2+deb12u1_amd64.deb
 6fb2005d9e9b4af58ce03a2958649683a7a44dbc 139432 libevview3-3_43.1-2+deb12u1_amd64.deb
Checksums-Sha256:
 9434ecc3626b30223a8f29be6df3e03eaaf8cb53a937f860329d8e7cf336605d 586496 evince-dbgsym_43.1-2+deb12u1_amd64.deb
 3b1336df4c1d5ed23646ef6233db584af8e336d3814a0ab3d7ad2e9389875afa 22885 evince_43.1-2+deb12u1_amd64-buildd.buildinfo
 b9b13c50173c75494fa217b87521ff8b86db3178df9a4b2682f929e8dcc317fa 286264 evince_43.1-2+deb12u1_amd64.deb
 890c7da6b3b944503c18ea652146eec078f412f777b5522f0dcb6977ef288732 32816 gir1.2-evince-3.0_43.1-2+deb12u1_amd64.deb
 9cadc7eae69c3b12eec4c1a214a2189a46140866ba004d9dfa82206068be9fce 522016 libevdocument3-4-dbgsym_43.1-2+deb12u1_amd64.deb
 a0fbaf693e71810c5b35ce9560ff1ed9bf10214aaf184116317447a34d0fd7dc 173668 libevdocument3-4_43.1-2+deb12u1_amd64.deb
 7f80be114db4c4a4cabac49814e94972cc4492a635356345176f58b6d50504ec 246012 libevince-dev_43.1-2+deb12u1_amd64.deb
 1cc5a24197622426b95c9134157d0816d82343929d50f8c9d68316d48fd2dfa3 447720 libevview3-3-dbgsym_43.1-2+deb12u1_amd64.deb
 d44aeedcaf368a2fabeaaa53c35d39cbedb55beb00b9ccbcb03ea59908fa6c7b 139432 libevview3-3_43.1-2+deb12u1_amd64.deb
Files:
 5a7886505020a007336596eaa139423a 586496 debug optional evince-dbgsym_43.1-2+deb12u1_amd64.deb
 c6d67cef5c2f39d2a5877ec3243d1c85 22885 gnome optional evince_43.1-2+deb12u1_amd64-buildd.buildinfo
 1696d21a309b0013d4d257ccfd0805e9 286264 gnome optional evince_43.1-2+deb12u1_amd64.deb
 ec154a1a8c837f28ad397aff4738593c 32816 introspection optional gir1.2-evince-3.0_43.1-2+deb12u1_amd64.deb
 df731fe3d1c5bbc8395dd98a043f95d1 522016 debug optional libevdocument3-4-dbgsym_43.1-2+deb12u1_amd64.deb
 684d118c02bd6addda5367d7dd2c5252 173668 libs optional libevdocument3-4_43.1-2+deb12u1_amd64.deb
 2c6d8cf5bde9de7f20c81051621f5eaf 246012 libdevel optional libevince-dev_43.1-2+deb12u1_amd64.deb
 0fee5ce16d93bff3306ba48944b06b9f 447720 debug optional libevview3-3-dbgsym_43.1-2+deb12u1_amd64.deb
 c316bcc615ee5fdd2a633b2319771bb9 139432 libs optional libevview3-3_43.1-2+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=PQ7S
-----END PGP SIGNATURE-----