Format: 1.8 Date: Tue, 18 Jun 2019 19:28:02 +0000 Source: evince Binary: evince evince-dbg evince-gtk evince-common libevdocument3-4 libevview3-3 libevince-dev gir1.2-evince-3.0 Architecture: all amd64 amd64_translations static_translations Version: 3.18.2-1ubuntu4.5 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jamie Strandboge Description: evince - Document (PostScript, PDF) viewer evince-common - Document (PostScript, PDF) viewer - common files evince-dbg - Document (PostScript, PDF) viewer - debugging symbols evince-gtk - dummy package for the transition from evince-gtk to evince gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets Closes: 909849 Launchpad-Bugs-Fixed: 1788929 1794848 Changes: evince (3.18.2-1ubuntu4.5) xenial-security; urgency=medium . * apparmor-profile: apply hardening from Ubuntu 18.10 - add preamble for expectations of the profile - evince{-previewer}: restrict access to DBus system bus (we allow full access to session, translation and accessibility buses for compatibility) + allow Get* to anything polkit allows + allow talking to avahi (for printing) + allow talking to colord (for printing) - make the thumbnailer more restrictive (LP: #1794848) (Closes: #909849) + remove evince abstraction and use only what is needed from it + limit access to DBus session bus + generally disallow writes + allow reads for non-hidden files * debian/apparmor-profile.abstraction: apply hardening from Ubuntu 18.10 - disallow access to the dirs of private files (LP: #1788929) * debian/apparmor-profile: allow /bin/env ixr Checksums-Sha1: b5980e90fcb1784d4b87eddc893213c925d5285a 404578 evince-common_3.18.2-1ubuntu4.5_all.deb 4289280117a4a4fb01c9718d83bcb0bc7e71a746 1608608 evince-dbg_3.18.2-1ubuntu4.5_amd64.deb 6cc1f3ac8fc7ef96214f450b680c7e7217bd94e0 455246 evince-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb 07e68d351d8436ec5fb4cdb6ebc3f02e74f3d8c1 5808 evince-gtk_3.18.2-1ubuntu4.5_amd64.deb cfd43dc800a407d96d22c67e30ea3dea8a66d685 151872 evince_3.18.2-1ubuntu4.5_amd64.deb 35420187c791e87af388818d9ccc01dc15b52581 2948196 evince_3.18.2-1ubuntu4.5_amd64_translations.tar.gz cd4cea192195a6bd83e0ffdd00d5827d477f5e85 1303711 evince_3.18.2-1ubuntu4.5_static_translations.tar.gz c10c976381947b12c0f9f574d2bc99ea16a3644e 26138 gir1.2-evince-3.0_3.18.2-1ubuntu4.5_amd64.deb dc6f1260cf94a2057ceede0ecda4abfa66cab2c6 410000 libevdocument3-4-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb a1dfd08a281c591370a752145e006bb852845eaa 227600 libevdocument3-4_3.18.2-1ubuntu4.5_amd64.deb 5f2c44fea2fb5a4a1a5a89eceee0094649b75120 332934 libevince-dev_3.18.2-1ubuntu4.5_amd64.deb a39c356f47e8c6157c7f55445713451803579472 295914 libevview3-3-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb 6f1fc41bc2844eed8436aa242b9b844a7c22dd88 117164 libevview3-3_3.18.2-1ubuntu4.5_amd64.deb Checksums-Sha256: 1c4ec00db44ffc25c000f4c93f71dd5f6e997d75c946476982b4303ae0f6b51b 404578 evince-common_3.18.2-1ubuntu4.5_all.deb f591f598befe53231c7dad0ef60529759a0aef2ac971247c922edf834e47cfa2 1608608 evince-dbg_3.18.2-1ubuntu4.5_amd64.deb 52d713cc54dfc35b0ed83ae195c764cb89c66b94cf6884422cbe85ec88f0c512 455246 evince-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb 4c783d8045c151ad48d0e5167a50c834ff3cf2332c31ee491ef2048c7369b2b8 5808 evince-gtk_3.18.2-1ubuntu4.5_amd64.deb bc2e322420000cab9f69838168e52f474aa1f490e1371736fdd4b0e85c4f7b73 151872 evince_3.18.2-1ubuntu4.5_amd64.deb aa99a2614cc2c236a7eae4f0a7a49ba1f1a5d0498c20b78adbc0aefe54106537 2948196 evince_3.18.2-1ubuntu4.5_amd64_translations.tar.gz a774b2533797ecc30651d768e4640e72e2fc54f8cb3ea463ad183a0d8fcb9d0e 1303711 evince_3.18.2-1ubuntu4.5_static_translations.tar.gz a547a9f510437444691e5386e0a15e61ceff976d0eccc675cdec755569101f4e 26138 gir1.2-evince-3.0_3.18.2-1ubuntu4.5_amd64.deb 0fe7de7221d85477bccafd0d35c741ea8f2bd813f859a4eaba71fbcac497a9d4 410000 libevdocument3-4-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb d6064b88eb2bd53164956679f678eeee03c56e078c2dc51f0b19bec06d164c82 227600 libevdocument3-4_3.18.2-1ubuntu4.5_amd64.deb f15d44f1706105344e4c239125c86f2098087ecf0add89b154ee46b2c4475605 332934 libevince-dev_3.18.2-1ubuntu4.5_amd64.deb 65fe736d2f3350f52b707aeabfd6a1cb5160ff94a04a4b649091d938e5165cf3 295914 libevview3-3-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb a9bed65410c61b0a242ba034ed75d63c355e3273d404e50e462464f9f27029ef 117164 libevview3-3_3.18.2-1ubuntu4.5_amd64.deb Files: 394a6aedd4d254bd06da5b3ed31d0fe1 404578 gnome optional evince-common_3.18.2-1ubuntu4.5_all.deb fcbb818fb537d615d1702f65877c1764 1608608 debug extra evince-dbg_3.18.2-1ubuntu4.5_amd64.deb 16bb8e557320e1089d87ee2d2ac0eb04 455246 gnome extra evince-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb 141a03ab4e6a56768c8d464f2be585a3 5808 oldlibs extra evince-gtk_3.18.2-1ubuntu4.5_amd64.deb 87bccbd130c9f10beecc23ffe09c476e 151872 gnome optional evince_3.18.2-1ubuntu4.5_amd64.deb 0294ac862a41fb2a5c8b7d487f07c7cd 2948196 raw-translations - evince_3.18.2-1ubuntu4.5_amd64_translations.tar.gz d519cbc51517248333aed20429d35e9e 1303711 raw-translations-static - evince_3.18.2-1ubuntu4.5_static_translations.tar.gz 4133b1fd4e0c05c1275d90af39a74e26 26138 introspection optional gir1.2-evince-3.0_3.18.2-1ubuntu4.5_amd64.deb 9e9c6354fe8a5c9f0b458565834f6de7 410000 libs extra libevdocument3-4-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb a8289d8ce45b65c51b4fb83f678331fc 227600 libs optional libevdocument3-4_3.18.2-1ubuntu4.5_amd64.deb 57f67ba2c17e564e5da7d8701e99f5ad 332934 libdevel optional libevince-dev_3.18.2-1ubuntu4.5_amd64.deb ffd333d3bbd94cf52d0bea2b93ee54de 295914 libs extra libevview3-3-dbgsym_3.18.2-1ubuntu4.5_amd64.ddeb 9fd87e11e366f0d3044560881c9c375b 117164 libs optional libevview3-3_3.18.2-1ubuntu4.5_amd64.deb Original-Maintainer: Debian GNOME Maintainers