Red Hat Security AdvisoryRHSA-2020:1173
okular security update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) okular-4.10.5-8.el7, okular-libs-4.10.5-8.el7, okular-part-4.10.5-8.el7
- Red Hat Enterprise Linux Client Optional (v. 7) okular-devel-4.10.5-8.el7
- Red Hat Enterprise Linux Server (v. 7) okular-4.10.5-8.el7, okular-devel-4.10.5-8.el7, okular-libs-4.10.5-8.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) okular-4.10.5-8.el7, okular-devel-4.10.5-8.el7, okular-libs-4.10.5-8.el7 +1
Fixes 1 record
Priority LOW 29
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01846 · Published 2018-09-06 · Fixed CWE-22
