Red Hat Security AdvisoryRHSA-2017:2388
evince security update
Released 2017-08-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) evince-3.22.1-5.2.el7_4, evince-dvi-3.22.1-5.2.el7_4, evince-libs-3.22.1-5.2.el7_4 +1
- Red Hat Enterprise Linux Client Optional (v. 7) evince-browser-plugin-3.22.1-5.2.el7_4, evince-devel-3.22.1-5.2.el7_4
- Red Hat Enterprise Linux Server (v. 7) evince-3.22.1-5.2.el7_4, evince-dvi-3.22.1-5.2.el7_4, evince-libs-3.22.1-5.2.el7_4 +2
- Red Hat Enterprise Linux Server Optional (v. 7) evince-browser-plugin-3.22.1-5.2.el7_4, evince-devel-3.22.1-5.2.el7_4, evince-devel-3.22.1-5.2.el7_4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) evince-3.22.1-5.2.el7_4, evince-dvi-3.22.1-5.2.el7_4, evince-libs-3.22.1-5.2.el7_4 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) evince-browser-plugin-3.22.1-5.2.el7_4, evince-devel-3.22.1-5.2.el7_4
Fixes 1 record
Priority HIGH 66
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.51076 · Published 2017-09-05 · Fixed
