-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 10:50:27 +0200 Source: evince Binary: evince evince-dbgsym gir1.2-evince-3.0 libevdocument3-4t64 libevdocument3-4t64-dbgsym libevince-dev libevview3-3t64 libevview3-3t64-dbgsym Architecture: amd64 Version: 48.1-3+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: evince - Document (PostScript, PDF) viewer gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4t64 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3t64 - Document (PostScript, PDF) rendering library - Gtk+ widgets Changes: evince (48.1-3+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * shell: quote strings in arguments used when calling ev_spawn (CVE-2026-46529) Checksums-Sha1: 9f9c740fb525eb66c0927ccc3e9e22cab4cec0c6 600760 evince-dbgsym_48.1-3+deb13u1_amd64.deb d76b2035634c54dd607bbda268251f094b177d62 24634 evince_48.1-3+deb13u1_amd64-buildd.buildinfo a4a5724f3cfd47a992937c207e3a2d3a23c8cf73 286036 evince_48.1-3+deb13u1_amd64.deb 712eb6f5dbc6997c86e353fa845990676f11b654 34924 gir1.2-evince-3.0_48.1-3+deb13u1_amd64.deb 5b30c2aa2b147a81dd9845350b1db12266f65d9a 532540 libevdocument3-4t64-dbgsym_48.1-3+deb13u1_amd64.deb 35fdfe0a08cc6f6dc938f2ee16425335b0e8c690 174492 libevdocument3-4t64_48.1-3+deb13u1_amd64.deb e92fbfe7c2b6b861f8a056905a2b5dbf8dd5e086 251284 libevince-dev_48.1-3+deb13u1_amd64.deb cb647096530b305e09fe7049429e269022a93587 454568 libevview3-3t64-dbgsym_48.1-3+deb13u1_amd64.deb 82e1cde5a6c4483b81195ac007ebee35214d8715 134244 libevview3-3t64_48.1-3+deb13u1_amd64.deb Checksums-Sha256: 964acae6db18030f395ca0f69c90b6e3fa446f70f862902801fa0d9bf995c9e2 600760 evince-dbgsym_48.1-3+deb13u1_amd64.deb 2f3bc519ac39cf60bc898695f25b8d893cb1dae5b501e984b3bec252d0234abc 24634 evince_48.1-3+deb13u1_amd64-buildd.buildinfo 21685b892b59e9e7f34c0f43503c3520e6ddedf5b4ce8538475a455ff958293f 286036 evince_48.1-3+deb13u1_amd64.deb 3e58d01755bccd2a8a66ed3cf7712c31b258c97d6a6c0cf36f90c00ab975fe2f 34924 gir1.2-evince-3.0_48.1-3+deb13u1_amd64.deb 92eb96fce7518ec77378bb76ad0273028d3d7ffbc248e6e08f89648dbe323a17 532540 libevdocument3-4t64-dbgsym_48.1-3+deb13u1_amd64.deb 821897feb384b6795ca12e14fc587155d1f7a025e897860d39d7f5aa8944d391 174492 libevdocument3-4t64_48.1-3+deb13u1_amd64.deb 89f9ff4cca82b079811deb86c3dd56400740710cd2940ec9ed0b17699901b40e 251284 libevince-dev_48.1-3+deb13u1_amd64.deb 94d46c7c6992b8947b81095356076598ce66aac9a8d4ea73f2d646d43255c355 454568 libevview3-3t64-dbgsym_48.1-3+deb13u1_amd64.deb 6bc44c1ee84999c8d2a2e65d527547edb25fe3dcdbce7c99668ae7389d1b0981 134244 libevview3-3t64_48.1-3+deb13u1_amd64.deb Files: 8e0e7826977587cc6f4b07b18a683687 600760 debug optional evince-dbgsym_48.1-3+deb13u1_amd64.deb 2eb3ceb58d5b484a9fedc1bc9095ef94 24634 gnome optional evince_48.1-3+deb13u1_amd64-buildd.buildinfo ae0d8693b27275d31e59c34cd362a6fd 286036 gnome optional evince_48.1-3+deb13u1_amd64.deb 0901ec139c827d06b7e931b9ee63542f 34924 introspection optional gir1.2-evince-3.0_48.1-3+deb13u1_amd64.deb 7702c8302dfbf924044297a39542d8fa 532540 debug optional libevdocument3-4t64-dbgsym_48.1-3+deb13u1_amd64.deb eab295f380bcda0cbc9f81b23a2f3947 174492 libs optional libevdocument3-4t64_48.1-3+deb13u1_amd64.deb 2b3fb70c935ed76ea7effc783e1daed9 251284 libdevel optional libevince-dev_48.1-3+deb13u1_amd64.deb 67477388c7cc854ee5e66eb3181d7ca4 454568 debug optional libevview3-3t64-dbgsym_48.1-3+deb13u1_amd64.deb 5d7dcc6d5b99826f827c968a9257de5e 134244 libs optional libevview3-3t64_48.1-3+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmoNnKkACgkQYg9P9sm2 dfFCYQ/7BbED5rL8cOqxZ7Yz5JCjXo6rXZ61F3iGa9zBJ7TJZ93x8XqgWQl2Zep2 7N14ZdVdAob5wGX/TC9MbJ8+B9JtyoON4A0c0DBMJjogG8Cas1cfp+s9hCMn4ZTF u5KH8E1CCTIxZguByGndK9M0ihmakKyGDMCgQVquKrNxzJoZ+V6suYZz8shPgUjC lxcLZGGoLbQb3vaNS1EBo2OtJB/L2iyezvk+ZaPD/EQ1qYq8fxqo4/fcg1ymS5ue g+OIR5nNqw7yWVB8yYT4nZe1+hCl4GcFe+hxrns+ldYjaVEFNzG4YrD8hWKFSrHf XYsKmI7nqBTekB3R6QkV6oAqtAI2pXLWMTsvzSmSj//+LJ/o4sUBr3syh9A799Fl b5AyNInBIX1MtixPSctPyjAUpSV5T9gJ4Uv/SdCAHmkXsuf1Hq+cA6z2kNOpv5pI pfjA5xoJPJ6kXoOeW0xXanW9zwEh7C4bTQvSBJM++7GI0dVmJUdPJw4T7v0xGOb8 7vtws/UOKqZxmu2H8AA8azGYdinm/A2aFwNTxpFYquQrrLQ0pYBrGGqPHMEx47hx i/i+TAF7mjAMD71wVnTEInqyB8c01PvoH0muQstCXHyKXprcotP+6+0iETbAnhOe 49zILvuJE25mTpxumN7qPYI1xtaYv8qfYw654i8SikHMZRUpcq4= =5C3n -----END PGP SIGNATURE-----