Format: 1.8 Date: Tue, 18 Jun 2019 19:15:55 +0000 Source: evince Binary: evince evince-common libevdocument3-4 libevview3-3 libevince-dev gir1.2-evince-3.0 browser-plugin-evince Architecture: i386 i386_translations Version: 3.28.4-0ubuntu1.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jamie Strandboge Description: browser-plugin-evince - plugin for web browsers to display documents (PostScript, PDF, …) evince - Document (PostScript, PDF) viewer evince-common - Document (PostScript, PDF) viewer - common files gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets Closes: 909849 Launchpad-Bugs-Fixed: 1788929 1794848 Changes: evince (3.28.4-0ubuntu1.2) bionic-security; urgency=medium . * apparmor-profile: apply hardening from Ubuntu 18.10 - add preamble for expectations of the profile - evince{-previewer}: restrict access to DBus system bus (we allow full access to session, translation and accessibility buses for compatibility) + allow Get* to anything polkit allows + allow talking to avahi (for printing) + allow talking to colord (for printing) - make the thumbnailer more restrictive (LP: #1794848) (Closes: #909849) + remove evince abstraction and use only what is needed from it + limit access to DBus session bus + generally disallow writes + allow reads for non-hidden files * debian/apparmor-profile.abstraction: apply hardening from Ubuntu 18.10 - disallow access to the dirs of private files (LP: #1788929) * debian/apparmor-profile: allow /bin/env ixr Checksums-Sha1: 3181aae59f16c2a55646d8548933911b1073e0e9 124768 browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 8d11e2a429fcad021da30c4f946ff486b6497cb3 33228 browser-plugin-evince_3.28.4-0ubuntu1.2_i386.deb 17ad5b393aa02793b50cb207f509546159607175 656720 evince-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb d2d8a87b1363719a44ef673882d7adce85453df8 21412 evince_3.28.4-0ubuntu1.2_i386.buildinfo 53e8e83443d56cef9eb4e60a9b31ad6b4baa66a0 272316 evince_3.28.4-0ubuntu1.2_i386.deb d38da69c8ae1edc0402b877edf851fddca12669b 2239052 evince_3.28.4-0ubuntu1.2_i386_translations.tar.gz 45523017d01b9a58b58705c3720d3d677f0b250c 26252 gir1.2-evince-3.0_3.28.4-0ubuntu1.2_i386.deb 6aff4e9b7ff354ebe2d63aea854848d7f15fc830 610588 libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 4873ac316b1bbd51630c9fb253fe5422c03e0606 239736 libevdocument3-4_3.28.4-0ubuntu1.2_i386.deb a9df1270f331c356bf07e7251bb016f407d0919b 138312 libevince-dev_3.28.4-0ubuntu1.2_i386.deb 216eaa4e86068404b3f003afb7731139b8b2b114 373076 libevview3-3-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 6bd3ffc3296436e3e0748f7bd6d853b505605c36 134280 libevview3-3_3.28.4-0ubuntu1.2_i386.deb Checksums-Sha256: d7c6f937430c6453baa824a54285fbd10df720d9a27289c3a15b249832682154 124768 browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 587f8ed37c1e5a6e54102b87d01e9de2c869b54086a0d0b531ebe0dcd7250cc7 33228 browser-plugin-evince_3.28.4-0ubuntu1.2_i386.deb 0e5ecfae918c4f74ec43dfa498445a1cd2130b1426680934b78fe622824e4a98 656720 evince-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 657d1a5d22dee8bf8f3377251c4511121241b60529e37cdae5d08fc5bf2181a3 21412 evince_3.28.4-0ubuntu1.2_i386.buildinfo ab893ba87343dcd8b03728a21e7884fe66e6650570bbc72fb7951a2346a11d23 272316 evince_3.28.4-0ubuntu1.2_i386.deb 90d741348c2e5b9565cdd4fa2110c15b40369122b0d381c74c3998fb54aedcf9 2239052 evince_3.28.4-0ubuntu1.2_i386_translations.tar.gz 9180626aac168a9f84acbcaa39cde63c5ba0e2535f3c00b8951437e3d2ec3bda 26252 gir1.2-evince-3.0_3.28.4-0ubuntu1.2_i386.deb 9a9813e178aa76443fae6334d33b2a084bcd7eaf8bfeb90585ecd9b2a2f7c895 610588 libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 47293919f4b18ea75f3bca3e4cc24ed3f59f327a4544c062893f6f3229929fd3 239736 libevdocument3-4_3.28.4-0ubuntu1.2_i386.deb fe44f4e13ecd47e4bd159b60bf0c4bb93eebbce6ccf0fe8fd36d607411e6a9dd 138312 libevince-dev_3.28.4-0ubuntu1.2_i386.deb 647614dc74b676ef17654e0260fadb3df5a6ac2f05ba1f0371c69bd64aeb08c3 373076 libevview3-3-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 3329addec1d34ba56efa36c3afb9cd8c05b7a74df7e3cd30722fc9ba11f3b414 134280 libevview3-3_3.28.4-0ubuntu1.2_i386.deb Files: 788a9c5d7a5334c8784fc78a77aa48c0 124768 debug optional browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb e36d21cb3056c60b55a5d8510ba1982f 33228 gnome optional browser-plugin-evince_3.28.4-0ubuntu1.2_i386.deb 808550e2570f62751541236948bbf5fc 656720 debug optional evince-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 0fc4c330470bb69f9052e376d1b26ae5 21412 gnome optional evince_3.28.4-0ubuntu1.2_i386.buildinfo d36945d79f6d8d4d855dfd2f1793d6fe 272316 gnome optional evince_3.28.4-0ubuntu1.2_i386.deb 17fadb02370ab89d199e130a9bdb42cc 2239052 raw-translations - evince_3.28.4-0ubuntu1.2_i386_translations.tar.gz d75d54f48073a0e1847ae8e306771556 26252 introspection optional gir1.2-evince-3.0_3.28.4-0ubuntu1.2_i386.deb 79adf21c2038822ab744639a9924774b 610588 debug optional libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb d54a665a62543a1dcbb5eff34a429297 239736 libs optional libevdocument3-4_3.28.4-0ubuntu1.2_i386.deb 4641811e0533d7836481cff23d6b4642 138312 libdevel optional libevince-dev_3.28.4-0ubuntu1.2_i386.deb 8603e9d58b3c9516c265c2041316c9e3 373076 debug optional libevview3-3-dbgsym_3.28.4-0ubuntu1.2_i386.ddeb 2b54622642efc2b42e949766f311e26f 134280 libs optional libevview3-3_3.28.4-0ubuntu1.2_i386.deb Original-Maintainer: Debian GNOME Maintainers