-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 10:50:27 +0200 Source: evince Binary: evince evince-dbgsym gir1.2-evince-3.0 libevdocument3-4t64 libevdocument3-4t64-dbgsym libevince-dev libevview3-3t64 libevview3-3t64-dbgsym Architecture: riscv64 Version: 48.1-3+deb13u1 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-04) Changed-By: Salvatore Bonaccorso Description: evince - Document (PostScript, PDF) viewer gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4t64 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3t64 - Document (PostScript, PDF) rendering library - Gtk+ widgets Changes: evince (48.1-3+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * shell: quote strings in arguments used when calling ev_spawn (CVE-2026-46529) Checksums-Sha1: 13be823053296f21896fb213955102158a3680fe 575644 evince-dbgsym_48.1-3+deb13u1_riscv64.deb 42a66e0bf59f62c42361ea4149c0474bec1484e5 24612 evince_48.1-3+deb13u1_riscv64-buildd.buildinfo f8a344b22c923c08c82573f0b6c1a68685bbd8d8 283152 evince_48.1-3+deb13u1_riscv64.deb a4c96eaa561240f3a9b2c4a39e9e3836a41980d7 34908 gir1.2-evince-3.0_48.1-3+deb13u1_riscv64.deb dd3f5446c54e7f5b1894ff6ce094bf72d96a9c7f 506692 libevdocument3-4t64-dbgsym_48.1-3+deb13u1_riscv64.deb 79bcb6bcb53ea5c498f0310bc9d47b7155da6fb9 170780 libevdocument3-4t64_48.1-3+deb13u1_riscv64.deb 6f614185322666411160dce53d3536ab6a1fb797 251320 libevince-dev_48.1-3+deb13u1_riscv64.deb d09e477c2c92d46d8b7a01edd7874921ebb1da81 437140 libevview3-3t64-dbgsym_48.1-3+deb13u1_riscv64.deb 4a558cb27f7f714d9a5b6a03565890d3d8f4ef4c 131884 libevview3-3t64_48.1-3+deb13u1_riscv64.deb Checksums-Sha256: 142f73e2c9ac22b873baa65b6efb4059d43630bd93467f12a7f58ba35ea7e741 575644 evince-dbgsym_48.1-3+deb13u1_riscv64.deb 49087c32551665421452fe8eee8918ffcdede636413780aee957029bd6f0d59d 24612 evince_48.1-3+deb13u1_riscv64-buildd.buildinfo 0814fd26772b6eaad2e99d5c77f487222d30f9696d5b55002b35ba316ea030ed 283152 evince_48.1-3+deb13u1_riscv64.deb e5b928ab08b9a8532a9bd2a9933e9946540b8767f4f9f37d1529678de3801958 34908 gir1.2-evince-3.0_48.1-3+deb13u1_riscv64.deb 0efa4d1a24632af20c0b53ea12569325ac6b8e7e54b3376685d6c61d61ad9d67 506692 libevdocument3-4t64-dbgsym_48.1-3+deb13u1_riscv64.deb a858483364cd6144dfbeceaeb25e79c275bb5b6b3e9e9a1c880f9c00849423f5 170780 libevdocument3-4t64_48.1-3+deb13u1_riscv64.deb a8ddc11941e6c7fbcd9757690b1212f21d3ad3fdb09e052a23da089a165615a0 251320 libevince-dev_48.1-3+deb13u1_riscv64.deb 504fd6815c62890af38e52db399038200ce4f5b96d0ea34bd3d4c0c3bf96c758 437140 libevview3-3t64-dbgsym_48.1-3+deb13u1_riscv64.deb 409dbc274f58834c62ff27664f7f19816574d120432a04f84fc544133bcfc19a 131884 libevview3-3t64_48.1-3+deb13u1_riscv64.deb Files: 94ed564ec68385300ec26e6829a78b69 575644 debug optional evince-dbgsym_48.1-3+deb13u1_riscv64.deb 7d6eb48998fddffc903380c1127e894e 24612 gnome optional evince_48.1-3+deb13u1_riscv64-buildd.buildinfo 735f95bbbd5d70b0f81c2e674b378cbf 283152 gnome optional evince_48.1-3+deb13u1_riscv64.deb 9676bb29580393feab37361ccec02ddc 34908 introspection optional gir1.2-evince-3.0_48.1-3+deb13u1_riscv64.deb cd36076e14d7586d69dbd5b336274df2 506692 debug optional libevdocument3-4t64-dbgsym_48.1-3+deb13u1_riscv64.deb fd9bc3af209d823aba9cfd3869d26320 170780 libs optional libevdocument3-4t64_48.1-3+deb13u1_riscv64.deb 394daa074dc394958b4ff8d0e973dc5d 251320 libdevel optional libevince-dev_48.1-3+deb13u1_riscv64.deb fec7065730e865a690dce70339921e87 437140 debug optional libevview3-3t64-dbgsym_48.1-3+deb13u1_riscv64.deb e7c93e881866b7a60e29e2c2398c7221 131884 libs optional libevview3-3t64_48.1-3+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgLDDByWcR07HDSHyNVgvumj7+mMFAmoNqCsACgkQNVgvumj7 +mPmmxAAkZIDVPfCoWgMJNJ2Ekhr54WjaHZSZAFhmPRjleDh0QnOYau8Z0ZsSwE4 hT4FP7xGOTM3qvY0pCfuH+6HBu2WHEoV5qV5EGJ1WreqN7OTN4k4rSuQY1iGchMN ZnLZ8hCMt6nP0Ar0L2AonfHP3cmZ9OnkorHUW6SFice2VQbH3ckxWLUtA78ykFZX w5VYsZndsu7PpqYi0NUSt+YND7yhKYxgpn+1hcwlnLNJvhLR03nJc3UlxSO5wrW7 tFI8nt0wqF5leJu92rlBot3uMqv7i6dCg2b/vlswDRwIKCFB3vCbK5VT6R3qR6v7 Xrv2SYsQj+bQFPOKS3O73c8jqvKb1S8oH6OvBZiI/n+l2DXE6c7I/CBvG1rFFDav KYty6y5zIOg4D1ShRZ/unzFhdyFbRzh91abiA/W63xlwLReQ2q0k7ymdXpjh5PHr cID5vqcY686DFMYGwXhdJI2DFjaQmgRvDn1niX9IZa2MC7SnyREdGeOkd45luHJF AL2gvk6bH2bnAKwVuht7sWkAC/ptuRlD3KLTnBm7I5/pM1rG5Uihc9fiRuiqj0mf lOhxhTboTCKfygaeqPfCmB4mLrdJtVrTCK74p0wKUuZMpVXgdRtugqmm7WWo4c38 V1Ubs6tV0ele7/VtZ6degr83j5VdliYJRHn5iaAamQiTaNtRY3Q= =mnQu -----END PGP SIGNATURE-----