This bug was fixed in the package evince - 3.28.4-0ubuntu1
---
evince (3.28.4-0ubuntu1) bionic; urgency=medium
* New upstream release (LP: #1790609)
* debian/rules:
- add --enable-ps to keep ghostscript file visionning disabled upstream,
(as in current bionic and cosmic)
I verified evince 3.28.4-0ubuntu1 from bionic-proposed with a broad
range of PDF and PS documents, some very simple, some complex with
thousands of pages and a variety of fonts and graphics and didn't find
any issue.
Marking as verification-done.
** Tags removed: verification-needed verification-
Hello Jeremy, or anyone else affected,
Accepted evince into bionic-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/evince/3.28.4-0ubuntu1
in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
https://wi
> Ideally, we'd keep postscript disabled
Just to be clear, it's currently enabled in cosmic (and all Ubuntu
series), so if we speak about Ubuntu it would be rather "ideally we
would disable postcript"
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is
We did update ghostscript, but I suspect there will be many more issues
discovered in the future.
Ideally, we'd keep postscript disabled, but I do understand postscript
documents are still being used by our users and disabling postscript
support would be viewed as a regression. As such, I think we
@Brian, you have some details on
https://gitlab.gnome.org/GNOME/evince/issues/967
the interesting bit is "The fix will be in 9.24" (speaking of ghoscript), that
version is in cosmic
https://launchpad.net/ubuntu/+source/ghostscript/9.24~dfsg+1-0ubuntu1
Note, that --enable-ps is the default in cos
** Changed in: evince (Ubuntu Bionic)
Status: Incomplete => New
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1790609
Title:
Update evince to 3.28.4
To manage notifications
I'm a bit confused here. As I understand it this upload uses the build
option --enable-ps something that was disabled by upstream due to an
unknown (the ghostscript bug is still private) security issue with
postscript files. Is this security issue really fixed in Ubuntu 18.04?
If so please provide
** Description changed:
- Impact
- ==
+ [Impact]
New release in the stable 3.28 series.
https://gitlab.gnome.org/GNOME/evince/commits/gnome-3-28
https://gitlab.gnome.org/GNOME/evince/blob/gnome-3-28/NEWS
- Other Info
- ==
- I am not working on this update now.
+ [Test Case]
3.28.4 was released today.
** Summary changed:
- Update evince to 3.28.3
+ Update evince to 3.28.4
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1790609
Title:
Update evince to 3
10 matches
Mail list logo