-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 13 Oct 2020 10:49:10 +0100 Source: evince Architecture: source Version: 3.38.0-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 829976 970383 Changes: evince (3.38.0-2) unstable; urgency=medium . * Team upload . [ Jeremy Bicha ] * debian/rules: Enable all auto features (except t1lib). This allows simplifying our configure rules. * Stop using -Wl,--as-needed, which is the bullseye toolchain's default * Remove remnants of the Autotools build that are no longer necessary . [ Simon McVittie ] * d/p/Remove-ability-to-launch-actions.patch: Add security hardening from upstream gnome-3-38 branch. The PDF specification defines "Launch Action", which allows documents to launch arbitrary applications. It appears that in practice this is only used by malware. Evince never *deliberately* allowed arbitrary code execution like this (even though the spec said it should), only opening documents in external MIME handlers, but some MIME handlers result in arbitrary code execution anyway. * Remove obsolete gnome-common build-dependency. This has been unnecessary ever since evince moved to the Meson build system. (Closes: #829976) * d/p/Make-the-build-reproducible.patch: Add patch from Chris Lamb to make the build reproducible (Closes: #970383) Checksums-Sha1: 632254d77ef718bb183366cfdcb911ed5058a696 3372 evince_3.38.0-2.dsc d1408bf04bbdec073504088e60c400241b177a47 33572 evince_3.38.0-2.debian.tar.xz b387e2d00ddd6c62777981bbdf1091523b420896 17048 evince_3.38.0-2_source.buildinfo Checksums-Sha256: c91031435b32bebe3df6268a8570fe0450e11fe8528c7ce4d8e0d5947b4206ed 3372 evince_3.38.0-2.dsc 1620b510f9413ec4a4bbb6f4b3db888739541a30bd4fc89efcde88ed78bd26bc 33572 evince_3.38.0-2.debian.tar.xz c25a4220957234e08cc3fdcc67a663401ea6a7b4c31be4aebf197a1cfd05860c 17048 evince_3.38.0-2_source.buildinfo Files: 910c261d7460ceb5e8d6eb0fd9fa30cc 3372 gnome optional evince_3.38.0-2.dsc ca3543e098abc3388f1b8a69103666d4 33572 gnome optional evince_3.38.0-2.debian.tar.xz 30a56e9badd2243409763c5d6bf64c31 17048 gnome optional evince_3.38.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl+FhbMACgkQ4FrhR4+B TE/7GA/+Nh8RjZfRl5atnDa76sP/ZR5ZQ5ggDRJUOdBLm6KLnIca6zCscq2xYKMx +drAxqPXhIGJ4WaZ5m86lrLTc5ZBTj4ioWsKRS2zwg3njh5drlFkC1XTBPKjnHLT 26H239rkNFjvaq8QsnMF8ws5WwnowtQzzpBOhUAA6KWkJNTthlJSb2AG7Y2wE7K7 IM2xBlPQz0b26kjl5ggCan3azkC9dl5y3c/cYppsDcLTugLtyG3OMXhGNIFuhnA7 Jhsw8HTP6AQNrepYXalW5GJaqlnN38k5YEmzW3lgiFTvAcawSfUF/TzgH02WTgXn NyvmDV1NjjYGQxofszqrPGuDroC34bH0nbDYnXCs+Ztcl8tLA6AkkCbo3sxyu04C u/hYdX9i8Aw4MNywIWaLKweDnnqS55eeg/nYfG3t9QzGoZaQgg+xbj1MB2Kq6wBR p2xBNDrqFgwOXgY6OwCa58GH3sKG/wf+mWcGJ6RkO2qepVmJwkqA5A4SOrQHMzvl yyunm54R34mHr3JrJmt60W9sWiDoN9qv0wHUbMBoY3e7Mfxz/2VCfltG2pLskYn9 bcjxd6wIjV1vK+mMddceiAV0JsTfbeLSORZJIrsriyGSjaiwFYLzsaPFCTZ9kJae 30geh2XylwopV3eoMfcQevCroB559XYytpyGAHdQ/Xm2aJwSmxk= =Ynre -----END PGP SIGNATURE-----
