From 7531ceb030f9195a8ade733ec861a98555b0a2d3 Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Sat, 15 Jul 2017 11:30:41 +0200 Subject: [PATCH 1/2] evince: Update version from 3.22.0 to 3.24.0 --- evince.be0 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/evince.be0 b/evince.be0 index 04e5ba29e..98c622256 100755 --- a/evince.be0 +++ b/evince.be0 @@ -1,6 +1,6 @@ #!/usr/bin/env beesh -# BEE_VERSION evince-3.22.0-0 +# BEE_VERSION evince-3.24.0-0 BEE_BUILDTYPE=configure From fb1510fb43fc7df3552a2a33d96a667f9375730f Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Fri, 1 Dec 2017 11:50:11 +0100 Subject: [PATCH 2/2] evince: Update version from 3.24.0 to 3.26.0 Evince 3.24.0 is susceptible to a command injection attack [1][2], which is fixed since 3.24.1, so also in 3.26.0. So update to that version. [1] http://www.cvedetails.com/cve/CVE-2017-1000083/ [2] https://bugzilla.gnome.org/show_bug.cgi?id=784947 --- evince.be0 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/evince.be0 b/evince.be0 index 98c622256..1385ea4f4 100755 --- a/evince.be0 +++ b/evince.be0 @@ -1,6 +1,6 @@ #!/usr/bin/env beesh -# BEE_VERSION evince-3.24.0-0 +# BEE_VERSION evince-3.26.0-0 BEE_BUILDTYPE=configure