Accepted evince 3.38.2-1+deb11u1 (source) into oldoldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 22 May 2026 09:54:41 +0200
Source: evince
Architecture: source
Version: 3.38.2-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Changes:
 evince (3.38.2-1+deb11u1) bullseye-security; urgency=high
 .
   * Non-maintainer upload by the LTS Security Team.
   * CVE-2026-46529: PDF/GoToR action argv injection RCE
Checksums-Sha1:
 d362e30540a94216b5f6b3e9e86194440aa4c277 3325 evince_3.38.2-1+deb11u1.dsc
 6fb18866c19aaa3ffb727ef656a2b1941ded17fa 2928540 evince_3.38.2.orig.tar.xz
 e8c3a01a1daa1bffe8ad9b5063e8e4baa785b3a7 33920 evince_3.38.2-1+deb11u1.debian.tar.xz
 a1d65ca49b33440cb75ca541b6b8e35c13821c9b 12075 evince_3.38.2-1+deb11u1_source.buildinfo
Checksums-Sha256:
 a2cac8dac910fffcddf7926201923bb4b1d008abc60c9531450ed43306ab02fd 3325 evince_3.38.2-1+deb11u1.dsc
 27d419d5fed6305e074628edcfde0cb734fffda205d63cac323391c04903bd94 2928540 evince_3.38.2.orig.tar.xz
 a31d21125383fa728c7b0cf95d5747e422d571720b720dc9d47aa4be5a2205c6 33920 evince_3.38.2-1+deb11u1.debian.tar.xz
 679e944ae4fca2833fc5c6371e7d89858e5121c970d4991d04bb9bcb36b1e31f 12075 evince_3.38.2-1+deb11u1_source.buildinfo
Files:
 1e3d6d589ea8d61048989873474adc40 3325 gnome optional evince_3.38.2-1+deb11u1.dsc
 497863ba00e1b2906c846d6d6c90a8e7 2928540 gnome optional evince_3.38.2.orig.tar.xz
 1059126c927f75d720cdf7cdb6779f30 33920 gnome optional evince_3.38.2-1+deb11u1.debian.tar.xz
 3fc006f67d9059f6c61b00124de8a66a 12075 gnome optional evince_3.38.2-1+deb11u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=LI4Q
-----END PGP SIGNATURE-----