-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 10:50:27 +0200
Source: evince
Architecture: source
Version: 48.1-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 evince (48.1-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * shell: quote strings in arguments used when calling ev_spawn
     (CVE-2026-46529)
Checksums-Sha1:
 6e44a75ffdf9dd6027e7a819a25d6c82407ef7bb 3480 evince_48.1-3+deb13u1.dsc
 f6882881c6c718017ad441f8dc6c9516f0fd2cb4 2879780 evince_48.1.orig.tar.xz
 743ad301dbdfc67282961d95d0dbad8d32fa19da 43108 evince_48.1-3+deb13u1.debian.tar.xz
 b1271f9a3ba2202834783785765fab97afcd7a67 6307 evince_48.1-3+deb13u1_source.buildinfo
Checksums-Sha256:
 9a974ddb5d36ffbb07317a06f6d2e01b9527ac6a1d819cbb7959343de9d61515 3480 evince_48.1-3+deb13u1.dsc
 5755a5270c94d58bf300c2367c764b2789176e3c5a288c3d9154b76ebaf0d3ef 2879780 evince_48.1.orig.tar.xz
 8669be82ea725c1d3cbe3cedcdb94ad18479a782a5dfcaeee6c40051e316c490 43108 evince_48.1-3+deb13u1.debian.tar.xz
 3b3cb6cd55f94094a20666499311ec0d4fad0c9646384d3e8081eedcfd01d2fa 6307 evince_48.1-3+deb13u1_source.buildinfo
Files:
 37ce17258ec8b42addd4e0a6eb1e141a 3480 gnome optional evince_48.1-3+deb13u1.dsc
 578d0a306599ae9273d91db410b4b129 2879780 gnome optional evince_48.1.orig.tar.xz
 b358ec4f714807d4210cf09bc842f21e 43108 gnome optional evince_48.1-3+deb13u1.debian.tar.xz
 c70605c285fb5b397840bdf17915f028 6307 gnome optional evince_48.1-3+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=PNFx
-----END PGP SIGNATURE-----