Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1908-1

Опубликовано: 15 авг. 2019
Источник: suse-cvrf

Описание

Security update for evince

This update for evince fixes the following issues:

  • CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
evince-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-devel-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-lang-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-comicsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-djvudocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-dvidocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-psdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
libevdocument3-4-3.26.0+20180128.1bd86963-lp151.4.6.1
libevview3-3-3.26.0+20180128.1bd86963-lp151.4.6.1
nautilus-evince-3.26.0+20180128.1bd86963-lp151.4.6.1
typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-lp151.4.6.1
typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-lp151.4.6.1
openSUSE Leap 15.1
evince-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-devel-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-lang-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-comicsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-djvudocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-dvidocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-psdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
libevdocument3-4-3.26.0+20180128.1bd86963-lp151.4.6.1
libevview3-3-3.26.0+20180128.1bd86963-lp151.4.6.1
nautilus-evince-3.26.0+20180128.1bd86963-lp151.4.6.1
typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-lp151.4.6.1
typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-lp151.4.6.1

Ссылки

Описание

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.

Затронутые продукты
openSUSE Leap 15.0:evince-3.26.0+20180128.1bd86963-lp151.4.6.1
openSUSE Leap 15.0:evince-devel-3.26.0+20180128.1bd86963-lp151.4.6.1
openSUSE Leap 15.0:evince-lang-3.26.0+20180128.1bd86963-lp151.4.6.1
openSUSE Leap 15.0:evince-plugin-comicsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1
Ссылки