Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2080-1

Опубликовано: 07 авг. 2019
Источник: suse-cvrf

Описание

Security update for evince

This update for evince fixes the following issues:

Security issues fixed:

  • CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory (bsc#1133037).
  • CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).

Список пакетов

SUSE Enterprise Storage 4
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Enterprise Storage 5
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Desktop 12 SP4
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1
typelib-1_0-EvinceView-3_0-3.20.2-6.27.1
SUSE Linux Enterprise Server 12 SP2-BCL
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server 12 SP2-LTSS
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server 12 SP3-BCL
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server 12 SP3-LTSS
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server 12 SP4
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE Linux Enterprise Software Development Kit 12 SP4
evince-devel-3.20.2-6.27.1
typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1
typelib-1_0-EvinceView-3_0-3.20.2-6.27.1
SUSE Linux Enterprise Workstation Extension 12 SP4
typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1
typelib-1_0-EvinceView-3_0-3.20.2-6.27.1
SUSE OpenStack Cloud 7
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1
SUSE OpenStack Cloud 8
evince-3.20.2-6.27.1
evince-browser-plugin-3.20.2-6.27.1
evince-lang-3.20.2-6.27.1
evince-plugin-djvudocument-3.20.2-6.27.1
evince-plugin-dvidocument-3.20.2-6.27.1
evince-plugin-pdfdocument-3.20.2-6.27.1
evince-plugin-psdocument-3.20.2-6.27.1
evince-plugin-tiffdocument-3.20.2-6.27.1
evince-plugin-xpsdocument-3.20.2-6.27.1
libevdocument3-4-3.20.2-6.27.1
libevview3-3-3.20.2-6.27.1
nautilus-evince-3.20.2-6.27.1

Ссылки

Описание

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.

Затронутые продукты
SUSE Enterprise Storage 4:evince-3.20.2-6.27.1
SUSE Enterprise Storage 4:evince-browser-plugin-3.20.2-6.27.1
SUSE Enterprise Storage 4:evince-lang-3.20.2-6.27.1
SUSE Enterprise Storage 4:evince-plugin-djvudocument-3.20.2-6.27.1
Ссылки

Описание

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

Затронутые продукты
SUSE Enterprise Storage 4:evince-3.20.2-6.27.1
SUSE Enterprise Storage 4:evince-browser-plugin-3.20.2-6.27.1
SUSE Enterprise Storage 4:evince-lang-3.20.2-6.27.1
SUSE Enterprise Storage 4:evince-plugin-djvudocument-3.20.2-6.27.1
Ссылки
Уязвимость SUSE-SU-2019:2080-1