High ELSA-2017-2388 1 CVE

Important: evince security update (Oracle Linux 7)

Published Aug 9, 2017 · Updated Aug 9, 2017

Ecosystem: Oracle Linux

Summary

[3.22.1-5.2]
- Related: #1469528 ensure .desktop file is still valid

[3.22.1-5.1]
+ Fix arbitrary code execution via filename in tar-compressed
comics archive
- Resolves: #1469528

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 7	evince	0:3.22.1-5.2.el7_4
Oracle Linux · 7	evince-browser-plugin	0:3.22.1-5.2.el7_4
Oracle Linux · 7	evince-devel	0:3.22.1-5.2.el7_4
Oracle Linux · 7	evince-dvi	0:3.22.1-5.2.el7_4
Oracle Linux · 7	evince-libs	0:3.22.1-5.2.el7_4
Oracle Linux · 7	evince-nautilus	0:3.22.1-5.2.el7_4

Vulnerabilities 1

Unscored —

CVE-2017-1000083 Public exploit EPSS 51%

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to …

evince atril atril evince Debian Ubuntu Alpine

Sep 5, 2017