Описание
ELSA-2017-2388: evince security update (IMPORTANT)
[3.22.1-5.2]
- Related: #1469528 ensure .desktop file is still valid
[3.22.1-5.1]
- Fix arbitrary code execution via filename in tar-compressed comics archive
- Resolves: #1469528
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
evince
3.22.1-5.2.el7_4
evince-browser-plugin
3.22.1-5.2.el7_4
evince-devel
3.22.1-5.2.el7_4
evince-dvi
3.22.1-5.2.el7_4
evince-libs
3.22.1-5.2.el7_4
evince-nautilus
3.22.1-5.2.el7_4
Oracle Linux x86_64
evince
3.22.1-5.2.el7_4
evince-browser-plugin
3.22.1-5.2.el7_4
evince-devel
3.22.1-5.2.el7_4
evince-dvi
3.22.1-5.2.el7_4
evince-libs
3.22.1-5.2.el7_4
evince-nautilus
3.22.1-5.2.el7_4
Связанные CVE
Связанные уязвимости
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
backend/comics/comics-document.c (aka the comic book backend) in GNOME ...
