Medium ELSA-2020-4024 1 CVE

Moderate: okular security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[4.10.5-9]
- Document::processAction: If the url points to a binary, dont run it
Resolves: bz#1821451

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	okular	0:4.10.5-9.el7
Oracle Linux · 7	okular-devel	0:4.10.5-9.el7
Oracle Linux · 7	okular-libs	0:4.10.5-9.el7
Oracle Linux · 7	okular-part	0:4.10.5-9.el7

Vulnerabilities 1

Unscored —

CVE-2020-9359

KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.

okular okular okular Debian Ubuntu Alpine

Mar 24, 2020