Unscored DSA-4624-1 3 CVEs

evince - security update

Published Feb 14, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	evince	3.22.1-3+deb9u2

Vulnerabilities 3

Unscored —

CVE-2017-1000159

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

evince atril atril evince Debian Ubuntu

Nov 27, 2017
Unscored —

CVE-2019-1010006

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/t…

Evince Team Evince evince atril Debian Ubuntu

Jul 15, 2019
Unscored —

CVE-2019-11459

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…

evince atril atril evince Debian Ubuntu Alpine

Apr 22, 2019