-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 10:53:39 +0200
Source: evince
Architecture: source
Version: 43.1-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 evince (43.1-2+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * shell: quote strings in arguments used when calling ev_spawn
     (CVE-2026-46529)
Checksums-Sha1:
 728704e3c8a1a1e240d1216394808cc237b91505 3390 evince_43.1-2+deb12u1.dsc
 f57a8290fbb2466b15e464678f74cfd6318e2794 2863860 evince_43.1.orig.tar.xz
 20a1e71505c49bbca4e64194ae30541fbad7df00 34296 evince_43.1-2+deb12u1.debian.tar.xz
 4beae673668a28a4c2d5d8d777caaede78231eb2 8022 evince_43.1-2+deb12u1_source.buildinfo
Checksums-Sha256:
 aa3d0e91e98a6949186d110ab76f8a90972a6cb9907aaab42ee9c6c604d2f5dd 3390 evince_43.1-2+deb12u1.dsc
 110188fe21b8426f56474f5f5ddd3b22cacc0bb519ce96ec41b784cdab6f7c7a 2863860 evince_43.1.orig.tar.xz
 54d6a6ce993906d38064e7a3578a13051e6dc0cd551704fa3fe380836cea402c 34296 evince_43.1-2+deb12u1.debian.tar.xz
 7660b7d84ad6106239c6d1e27d73623b077d8f80592f025afd673a6f9353b0b3 8022 evince_43.1-2+deb12u1_source.buildinfo
Files:
 93477a4e2a892866d4d711a27603ff39 3390 gnome optional evince_43.1-2+deb12u1.dsc
 3a72f0bc059823690043384d16ab17ed 2863860 gnome optional evince_43.1.orig.tar.xz
 ab447b1e2ce35bd851e3c20629896cfa 34296 gnome optional evince_43.1-2+deb12u1.debian.tar.xz
 b3df311f33ced0bbdb92c38bf215db73 8022 gnome optional evince_43.1-2+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ZRKF
-----END PGP SIGNATURE-----