Format: 1.8 Date: Tue, 18 Jun 2019 19:15:55 +0000 Source: evince Binary: evince evince-common libevdocument3-4 libevview3-3 libevince-dev gir1.2-evince-3.0 browser-plugin-evince Architecture: arm64 arm64_translations Version: 3.28.4-0ubuntu1.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jamie Strandboge Description: browser-plugin-evince - plugin for web browsers to display documents (PostScript, PDF, …) evince - Document (PostScript, PDF) viewer evince-common - Document (PostScript, PDF) viewer - common files gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets Closes: 909849 Launchpad-Bugs-Fixed: 1788929 1794848 Changes: evince (3.28.4-0ubuntu1.2) bionic-security; urgency=medium . * apparmor-profile: apply hardening from Ubuntu 18.10 - add preamble for expectations of the profile - evince{-previewer}: restrict access to DBus system bus (we allow full access to session, translation and accessibility buses for compatibility) + allow Get* to anything polkit allows + allow talking to avahi (for printing) + allow talking to colord (for printing) - make the thumbnailer more restrictive (LP: #1794848) (Closes: #909849) + remove evince abstraction and use only what is needed from it + limit access to DBus session bus + generally disallow writes + allow reads for non-hidden files * debian/apparmor-profile.abstraction: apply hardening from Ubuntu 18.10 - disallow access to the dirs of private files (LP: #1788929) * debian/apparmor-profile: allow /bin/env ixr Checksums-Sha1: 88bded22b297ba1bf1b6061adc83650febf0a0e3 140244 browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 1e62058d859f677d4b386aecda24b11599d0f48b 26296 browser-plugin-evince_3.28.4-0ubuntu1.2_arm64.deb e5f1b89d47ec27853bed9e9a52d7786bbfd14c6f 785484 evince-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb bc4ce7aca0441c57dcfce2ffdfd5dadf7bba5bcb 21409 evince_3.28.4-0ubuntu1.2_arm64.buildinfo d8bd46ed191d8b896adc2de03456b03434e5886f 225292 evince_3.28.4-0ubuntu1.2_arm64.deb 0a779f19faa963ea01f5aaad9eaa0197b14efa67 2237365 evince_3.28.4-0ubuntu1.2_arm64_translations.tar.gz 57da167d31f2fff9f9f80623016eed855982d6b4 26256 gir1.2-evince-3.0_3.28.4-0ubuntu1.2_arm64.deb 4b7334bee9c0dbb8bddad2903d6dcdd00dd8bfa7 723488 libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb c5b23bf851a056624cc69de5e4b0484c3fbdcc6a 188744 libevdocument3-4_3.28.4-0ubuntu1.2_arm64.deb 7fa29776f0c428b565c4030196fe4f6c3ed235e3 138336 libevince-dev_3.28.4-0ubuntu1.2_arm64.deb 9a4a52e7b12fd50673145f2c3ef818b939e36304 444152 libevview3-3-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 84c7bad216ce2b1b065b8382cf1361489e66c182 95816 libevview3-3_3.28.4-0ubuntu1.2_arm64.deb Checksums-Sha256: f0cf24e99c14f2f1437118dd507ef79f51db2377f3dd744d6bfb0c47fbb0ada4 140244 browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 7bb49645434db35b8c309ffa574a5ecb9ccd92b0e6f352487c7b705fd94429cb 26296 browser-plugin-evince_3.28.4-0ubuntu1.2_arm64.deb fd1c3987b092ac8f71273de2326a115b39f8fa3fab53ceafd8f3c281b5df99b3 785484 evince-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb f39454117c7aa823190bd0a8c926b63ddc7dfb71ce38b7af760998fa927ddf84 21409 evince_3.28.4-0ubuntu1.2_arm64.buildinfo f8bf3b51a07daa99815504c78e40574b070394b8c5a9877526fbe8db39d8f4b1 225292 evince_3.28.4-0ubuntu1.2_arm64.deb 500cf9de605136d9c47533e00c8c5f65658c55e9d6a936e09d719d7fdb4a7daa 2237365 evince_3.28.4-0ubuntu1.2_arm64_translations.tar.gz bea8cd8749e02a0c83edecdf26b94cab18c858fb0fb7cbf1c7db2d2f049db79e 26256 gir1.2-evince-3.0_3.28.4-0ubuntu1.2_arm64.deb 118f48862847a4bf6cac5a2a5c17eaab874f30ab1b9d63368d52f1f0680b78ee 723488 libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 63a32c67678ea882b7791a706072427bb45345b617718154eed89d3b97eae925 188744 libevdocument3-4_3.28.4-0ubuntu1.2_arm64.deb 5e7179e30ba095fdfe0622ceacf5bb7a46536b7eb9cb5177a906b23bc6b02865 138336 libevince-dev_3.28.4-0ubuntu1.2_arm64.deb 3b801292beb9543741c2b7f5ba895e634861a591a5cc7bc0ef50b9e4c240abb2 444152 libevview3-3-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 99772b85837fccaf5d32a722b70eb26d3aa0feb7763dc43b2b37325f4921f104 95816 libevview3-3_3.28.4-0ubuntu1.2_arm64.deb Files: 7ca15073da0ad67752fb83f3069104bd 140244 debug optional browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 4767a0a6b47ee1b995f9b40dc9f8ad8e 26296 gnome optional browser-plugin-evince_3.28.4-0ubuntu1.2_arm64.deb 1cf720430872c00bacf90bd90c7af778 785484 debug optional evince-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 410ec9397f05107b825071ed48bea854 21409 gnome optional evince_3.28.4-0ubuntu1.2_arm64.buildinfo f8c8980e5ba1d23c1d771fe29f3cf334 225292 gnome optional evince_3.28.4-0ubuntu1.2_arm64.deb cf1216e59d5df269a36c6367370a065f 2237365 raw-translations - evince_3.28.4-0ubuntu1.2_arm64_translations.tar.gz a26e6d89d0968cdc5b18fff860a51615 26256 introspection optional gir1.2-evince-3.0_3.28.4-0ubuntu1.2_arm64.deb f37fee741b58411ed3cd3ffdd67be861 723488 debug optional libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb 24b33845450107b376b1b46fa6681ee5 188744 libs optional libevdocument3-4_3.28.4-0ubuntu1.2_arm64.deb 710b9eca9e57fe1a3d063deb1897a79f 138336 libdevel optional libevince-dev_3.28.4-0ubuntu1.2_arm64.deb a72fb03112dc8820a2ab1a4ae21cd0da 444152 debug optional libevview3-3-dbgsym_3.28.4-0ubuntu1.2_arm64.ddeb ddc266cede4eb73dc78f184f1d62365d 95816 libs optional libevview3-3_3.28.4-0ubuntu1.2_arm64.deb Original-Maintainer: Debian GNOME Maintainers