MGASA-2019-0355 Updated evince packages fix security vulnerability

The updated packages fix a security vulnerability: The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image...

GNOME security, bug fix, and enhancement update

accountsservice 0.6.50-7 - Dont send change updates for login history changes Resolves: 1713080 appstream-data 8-20190805 - Regenerate the RHEL metadata to include the latest cockpit changes - Resolves: 1673011 8-20190719 - Regenerate the RHEL metadata - Resolves: 1673011 8-20180721 - Regenerate...

Low: Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

An update for GNOME is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

ALSA-2019:3553 Low: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of AlmaLinux. Security Fixes: evince: uninitialized memory use in function tiffdocumentrender and tiffdocumentgetthumbnail CVE-2019-11459 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd CVE-2019-12795 For more details about the security issues...

GNOME security, bug fix, and enhancement update

An update is available for pidgin, gnome-desktop3, pango, gdk-pixbuf2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME is the default desktop environment o...

evince input validation error vulnerability

evince is a document viewer used in the GNOME desktop that supports PDF, PostScript, DjVu, TIFF and DVI formats. An input validation error vulnerability exists in evince, which stems from the program failing to check the number of pages, and can be exploited by an attacker to cause the applicatio...

CVE-2013-3718

evince is missing a check on number of pages which can lead to a segmentation fault...

DEBIAN-CVE-2013-3718

evince is missing a check on number of pages which can lead to a segmentation fault...

CVE-2013-3718

evince is missing a check on number of pages which can lead to a segmentation fault...

CVE-2013-3718

evince is missing a check on number of pages which can lead to a segmentation fault...

Design/Logic Flaw

evince is missing a check on number of pages which can lead to a segmentation fault...

CVE-2013-3718

CVE-2013-3718 affects the Evince document viewer. The root cause described across connected sources is a missing check on the number of pages, which can lead to a segmentation fault. Public references note this vulnerability across multiple distributions (Red Hat, SUSE, Debian, Ubuntu, etc.). The...

CVE-2013-3718

evince is missing a check on number of pages which can lead to a segmentation fault...

CVE-2013-3718

evince is missing a check on number of pages which can lead to a segmentation fault...

EulerOS 2.0 SP5 : evince (EulerOS-SA-2019-1906)

According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The...

Oracle Linux 8 : poppler (ELSA-2019-2713)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2713 advisory. 0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlic...

evince, okular, poppler security update

CentOS Errata and Security Advisory CESA-2019:2022 An update for poppler, evince, and okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives ...

CentOS 7 : evince / okular / poppler (CESA-2019:2022)

An update for poppler, evince, and okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openSUSE Security Update : evince (openSUSE-2019-1908)

This update for evince fixes the following issues : - CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c bsc1141619. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...