[ubuntu/artful-proposed] evince 3.24.0-0ubuntu2 (Accepted)

[Steve Beattie]

evince (3.24.0-0ubuntu2) artful; urgency=medium

  * SECURITY UPDATE: command injection via cbt files
    - debian/patches/CVE-2017-1000083.patch: disable cbt support
      entirely as not widely used.
    - CVE-2017-1000083

Date: Wed, 12 Jul 2017 00:03:50 -0700
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Tyler Hicks <tyhicks at canonical.com>
https://launchpad.net/ubuntu/+source/evince/3.24.0-0ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 12 Jul 2017 00:03:50 -0700
Source: evince
Binary: evince evince-gtk evince-common libevdocument3-4 libevview3-3 libevince-dev gir1.2-evince-3.0 browser-plugin-evince
Architecture: source
Version: 3.24.0-0ubuntu2
Distribution: artful
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description:
 browser-plugin-evince - plugin for web browsers to display documents (PostScript, PDF, …)
 evince     - Document (PostScript, PDF) viewer
 evince-common - Document (PostScript, PDF) viewer - common files
 evince-gtk - dummy package for the transition from evince-gtk to evince
 gir1.2-evince-3.0 - GObject introspection data for the evince libraries
 libevdocument3-4 - Document (PostScript, PDF) rendering library
 libevince-dev - Document (PostScript, PDF) rendering library - development files
 libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets
Changes:
 evince (3.24.0-0ubuntu2) artful; urgency=medium
 .
   * SECURITY UPDATE: command injection via cbt files
     - debian/patches/CVE-2017-1000083.patch: disable cbt support
       entirely as not widely used.
     - CVE-2017-1000083
Checksums-Sha1:
 bc20c81a0667fd209758a436b39c42f7c4643ffe 3143 evince_3.24.0-0ubuntu2.dsc
 813962380e4a546304ea2b5f9c70f2c99d697ed2 32720 evince_3.24.0-0ubuntu2.debian.tar.xz
 ac01ad44e32ae646406e410e98c1ca95cb475d31 17126 evince_3.24.0-0ubuntu2_source.buildinfo
Checksums-Sha256:
 a1fbef908e87e28e2cb650add55e87805ad3078c754cdd22aef598e1078b2b81 3143 evince_3.24.0-0ubuntu2.dsc
 f7733fa4dd163484b52ce091d5a9e6b2d5b1313dd5ae97ec1218a4b60b6bd3f8 32720 evince_3.24.0-0ubuntu2.debian.tar.xz
 52611a606e34068885948453fc874971034d3427627ee029778710ec3fe5bb22 17126 evince_3.24.0-0ubuntu2_source.buildinfo
Files:
 3514cf33083d74c3e79b9d87fba2e812 3143 gnome optional evince_3.24.0-0ubuntu2.dsc
 58766d9afaf758e9f8818030c494fce0 32720 gnome optional evince_3.24.0-0ubuntu2.debian.tar.xz
 51163a33cb8821c1471de7188f2be3d1 17126 gnome optional evince_3.24.0-0ubuntu2_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=FPTR
-----END PGP SIGNATURE-----