Lucene search

DebianDEBIAN:DLA-2856-1:2BB00

HistoryDec 27, 2021 - 8:34 p.m.

[SECURITY] [DLA 2856-1] okular security update

2021-12-2720:34:29

lists.debian.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

5.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.0%

JSON

Debian LTS Advisory DLA-2856-1 [email protected]
https://www.debian.org/lts/security/ Adrian Bunk
December 27, 2021 https://wiki.debian.org/LTS

Package : okular
Version : 4:16.08.2-1+deb9u2
CVE ID : CVE-2020-9359
Debian Bug : 954891

Code execution via an action link in a PDF document was fixed in the
KDE document viewer Okular.

For Debian 9 stretch, this problem has been fixed in version
4:16.08.2-1+deb9u2.

We recommend that you upgrade your okular packages.

For the detailed security status of okular please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/okular

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9i386okular< 4:16.08.2-1+deb9u2okular_4:16.08.2-1+deb9u2_i386.deb
Debian8allokular< 4:4.14.2-2+deb8u2okular_4:4.14.2-2+deb8u2_all.deb
Debian10arm64libokular5core8-dbgsym< 4:17.12.2-2.2+deb10u1libokular5core8-dbgsym_4:17.12.2-2.2+deb10u1_arm64.deb
Debian10s390xqml-module-org-kde-okular-dbgsym< 4:17.12.2-2.2+deb10u1qml-module-org-kde-okular-dbgsym_4:17.12.2-2.2+deb10u1_s390x.deb
Debian9i386okular-extra-backends< 4:16.08.2-1+deb9u2okular-extra-backends_4:16.08.2-1+deb9u2_i386.deb
Debian10i386okular-dev< 4:17.12.2-2.2+deb10u1okular-dev_4:17.12.2-2.2+deb10u1_i386.deb
Debian10armhflibokular5core8< 4:17.12.2-2.2+deb10u1libokular5core8_4:17.12.2-2.2+deb10u1_armhf.deb
Debian10arm64okular-extra-backends-dbgsym< 4:17.12.2-2.2+deb10u1okular-extra-backends-dbgsym_4:17.12.2-2.2+deb10u1_arm64.deb
Debian10armhfokular-extra-backends< 4:17.12.2-2.2+deb10u1okular-extra-backends_4:17.12.2-2.2+deb10u1_armhf.deb
Debian10mips64ellibokular5core8< 4:17.12.2-2.2+deb10u1libokular5core8_4:17.12.2-2.2+deb10u1_mips64el.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	i386	okular	< 4:16.08.2-1+deb9u2	okular_4:16.08.2-1+deb9u2_i386.deb
Debian	8	all	okular	< 4:4.14.2-2+deb8u2	okular_4:4.14.2-2+deb8u2_all.deb
Debian	10	arm64	libokular5core8-dbgsym	< 4:17.12.2-2.2+deb10u1	libokular5core8-dbgsym_4:17.12.2-2.2+deb10u1_arm64.deb
Debian	10	s390x	qml-module-org-kde-okular-dbgsym	< 4:17.12.2-2.2+deb10u1	qml-module-org-kde-okular-dbgsym_4:17.12.2-2.2+deb10u1_s390x.deb
Debian	9	i386	okular-extra-backends	< 4:16.08.2-1+deb9u2	okular-extra-backends_4:16.08.2-1+deb9u2_i386.deb
Debian	10	i386	okular-dev	< 4:17.12.2-2.2+deb10u1	okular-dev_4:17.12.2-2.2+deb10u1_i386.deb
Debian	10	armhf	libokular5core8	< 4:17.12.2-2.2+deb10u1	libokular5core8_4:17.12.2-2.2+deb10u1_armhf.deb
Debian	10	arm64	okular-extra-backends-dbgsym	< 4:17.12.2-2.2+deb10u1	okular-extra-backends-dbgsym_4:17.12.2-2.2+deb10u1_arm64.deb
Debian	10	armhf	okular-extra-backends	< 4:17.12.2-2.2+deb10u1	okular-extra-backends_4:17.12.2-2.2+deb10u1_armhf.deb
Debian	10	mips64el	libokular5core8	< 4:17.12.2-2.2+deb10u1	libokular5core8_4:17.12.2-2.2+deb10u1_mips64el.deb