Format: 1.8 Date: Tue, 18 Jun 2019 19:15:55 +0000 Source: evince Binary: evince evince-common libevdocument3-4 libevview3-3 libevince-dev gir1.2-evince-3.0 browser-plugin-evince Architecture: armhf armhf_translations Version: 3.28.4-0ubuntu1.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jamie Strandboge Description: browser-plugin-evince - plugin for web browsers to display documents (PostScript, PDF, …) evince - Document (PostScript, PDF) viewer evince-common - Document (PostScript, PDF) viewer - common files gir1.2-evince-3.0 - GObject introspection data for the evince libraries libevdocument3-4 - Document (PostScript, PDF) rendering library libevince-dev - Document (PostScript, PDF) rendering library - development files libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets Closes: 909849 Launchpad-Bugs-Fixed: 1788929 1794848 Changes: evince (3.28.4-0ubuntu1.2) bionic-security; urgency=medium . * apparmor-profile: apply hardening from Ubuntu 18.10 - add preamble for expectations of the profile - evince{-previewer}: restrict access to DBus system bus (we allow full access to session, translation and accessibility buses for compatibility) + allow Get* to anything polkit allows + allow talking to avahi (for printing) + allow talking to colord (for printing) - make the thumbnailer more restrictive (LP: #1794848) (Closes: #909849) + remove evince abstraction and use only what is needed from it + limit access to DBus session bus + generally disallow writes + allow reads for non-hidden files * debian/apparmor-profile.abstraction: apply hardening from Ubuntu 18.10 - disallow access to the dirs of private files (LP: #1788929) * debian/apparmor-profile: allow /bin/env ixr Checksums-Sha1: e394f9e1b8733708e069072995fcba982cf80533 135168 browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb a7e1791c20ce4bcdbf756fee24339652b6c31d62 26088 browser-plugin-evince_3.28.4-0ubuntu1.2_armhf.deb a84d3fbcaa9a29f1fd6afa14c06ccf3f70b00b69 751976 evince-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb 03fb28e68e5d69a7ec899f9d8750c8d973d7b4d9 21431 evince_3.28.4-0ubuntu1.2_armhf.buildinfo e6cc903b2bb827341fec8ffe43055cf9693ff2c9 228816 evince_3.28.4-0ubuntu1.2_armhf.deb 7f7b18ee4697461ccf2fef3ff83beedc681dc07f 2237442 evince_3.28.4-0ubuntu1.2_armhf_translations.tar.gz 0bd6bb82825b3a5649559a9b06e4f8d0bd80fb95 26256 gir1.2-evince-3.0_3.28.4-0ubuntu1.2_armhf.deb 0ac55faa6e99ced47eec627374956eddbd0245b2 682284 libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb 480811f1fc6203b06049fa26fafb9ccd7ac8b365 185948 libevdocument3-4_3.28.4-0ubuntu1.2_armhf.deb 4c679fc00983f2bb6c8ce5e0388e59d663b89a9d 138332 libevince-dev_3.28.4-0ubuntu1.2_armhf.deb 5ac4afdb9722fcc8fc79173a71d794bb9b178f2f 423232 libevview3-3-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb f53d43066eaa2f27625dbc78d51a2228de7568c3 100008 libevview3-3_3.28.4-0ubuntu1.2_armhf.deb Checksums-Sha256: 83533a7168d77d0f059e95ba88cac7f93e6faba3c0b81eeadbc027fcdfd729bc 135168 browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb ecbd8c92d6bb7094ab6214fd72421294d8c946bee2ced1d041bed61f934fecee 26088 browser-plugin-evince_3.28.4-0ubuntu1.2_armhf.deb 423298fa9040eb66363c917d6852ccea36032ffd757b88eae879fdcc41a6d15a 751976 evince-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb 22c37939df8b88683149c0e573df39cd3d1433047b88b0e8e08256a31dc673eb 21431 evince_3.28.4-0ubuntu1.2_armhf.buildinfo d036267273c3b1d5a5d731114421f5911fd717ed515b09ae8d7f55062ccfc577 228816 evince_3.28.4-0ubuntu1.2_armhf.deb e2adc21d400fdd7f202dd7d2fb9379cc7cec5245fe06bae3524e5ccf7ef6bee3 2237442 evince_3.28.4-0ubuntu1.2_armhf_translations.tar.gz b8ab67b383bff7ca5ce1767160d1ff5d82dacbcceebb2b0305129d3e2ffee426 26256 gir1.2-evince-3.0_3.28.4-0ubuntu1.2_armhf.deb 2ebaaa7d689b5c6411b2500fe979ffeddf0523d580a22e3d4a2357353befb96f 682284 libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb 032e1e0d29ab739c27991905550763b59fdd7d51410a900e5b06a7a336fb7340 185948 libevdocument3-4_3.28.4-0ubuntu1.2_armhf.deb 60307871883956214dc2bc9e26175e0d2f335eece94583474174012d6eb64534 138332 libevince-dev_3.28.4-0ubuntu1.2_armhf.deb d939c6082f896ca5a0b751dcc3dbeb02e66f5c96e9a087c50b807362bc2704c9 423232 libevview3-3-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb 6711b786febc8f1d1dc77b30cff3fbf8be513cef9590cb0551e9b60866b513e9 100008 libevview3-3_3.28.4-0ubuntu1.2_armhf.deb Files: 847e6bf340e86899f2ae92799403ce25 135168 debug optional browser-plugin-evince-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb d2275eb6798ff8e6213ecbe6695bed35 26088 gnome optional browser-plugin-evince_3.28.4-0ubuntu1.2_armhf.deb ba4ae6cf5e4443b8023b2cd57ea2e2aa 751976 debug optional evince-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb bbc3c4fc12c10269e60c717e1dd731ac 21431 gnome optional evince_3.28.4-0ubuntu1.2_armhf.buildinfo 9449a6952c1752318336138c0ba98ae8 228816 gnome optional evince_3.28.4-0ubuntu1.2_armhf.deb 72f4990d94d6583410f5987908b80599 2237442 raw-translations - evince_3.28.4-0ubuntu1.2_armhf_translations.tar.gz 48cb42e3cfcf72347cb2cc32e8a065b8 26256 introspection optional gir1.2-evince-3.0_3.28.4-0ubuntu1.2_armhf.deb e38502408a49dd961cd8462bdfba7d54 682284 debug optional libevdocument3-4-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb 7fc27db938a6e214c593220a216909e5 185948 libs optional libevdocument3-4_3.28.4-0ubuntu1.2_armhf.deb f6add1a5f78f7c56119cc6f5a008eb51 138332 libdevel optional libevince-dev_3.28.4-0ubuntu1.2_armhf.deb 356855878900feb99e41736ed0384ab0 423232 debug optional libevview3-3-dbgsym_3.28.4-0ubuntu1.2_armhf.ddeb f6920a4265b2092ceadfcb67f001157c 100008 libs optional libevview3-3_3.28.4-0ubuntu1.2_armhf.deb Original-Maintainer: Debian GNOME Maintainers