ELSA-2017-2388

ELSA-2017-2388 - evince security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-08-09

Description

[3.22.1-5.2]
- Related: #1469528 ensure .desktop file is still valid

[3.22.1-5.1]
+ Fix arbitrary code execution via filename in tar-compressed
comics archive
- Resolves: #1469528

Related CVEs

CVE-2017-1000083

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	evince-3.22.1-5.2.el7_4.src.rpm	84cb1970eb327b7ef529cd95a7f23cbf832df43cabb75b6dff0eda4d8b54abbb	ELSA-2020-3977	ol7_aarch64_latest
	evince-3.22.1-5.2.el7_4.src.rpm	84cb1970eb327b7ef529cd95a7f23cbf832df43cabb75b6dff0eda4d8b54abbb	ELSA-2020-3977	ol7_aarch64_optional_latest
	evince-3.22.1-5.2.el7_4.aarch64.rpm	21ab097924b11119587e07e8bfd1516b1ae4e9cb48dff6bfc0770fccf6ebb5a0	ELSA-2020-3977	ol7_aarch64_latest
	evince-browser-plugin-3.22.1-5.2.el7_4.aarch64.rpm	474c6d9909bec3fe9d0b73cad98ce4309dde1f4327d32d7360c48bae6af9a720	ELSA-2020-3977	ol7_aarch64_optional_latest
	evince-devel-3.22.1-5.2.el7_4.aarch64.rpm	6335047648ce5e3f19c2448b1ae840d58aa5bdff754b0e561850e3944b094538	ELSA-2020-3977	ol7_aarch64_optional_latest
	evince-dvi-3.22.1-5.2.el7_4.aarch64.rpm	1fde0cc5e63a73ddef55965aa8ccc6e75dffc9514a9dc2c6e6b73cd2d530dd7f	ELSA-2020-3977	ol7_aarch64_latest
	evince-libs-3.22.1-5.2.el7_4.aarch64.rpm	d05f8c6e2e2fb3fc4525671c55cbec4eabbbbfe7a45891198e858b021c62a3d8	ELSA-2020-3977	ol7_aarch64_latest
	evince-nautilus-3.22.1-5.2.el7_4.aarch64.rpm	8792e166d73f68c0702ff8de7fb1c5400375c3c498679807a98df8ed30de3d04	ELSA-2020-3977	ol7_aarch64_latest
Oracle Linux 7 (x86_64)	evince-3.22.1-5.2.el7_4.src.rpm	84cb1970eb327b7ef529cd95a7f23cbf832df43cabb75b6dff0eda4d8b54abbb	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-3.22.1-5.2.el7_4.src.rpm	84cb1970eb327b7ef529cd95a7f23cbf832df43cabb75b6dff0eda4d8b54abbb	ELSA-2020-3977	ol7_x86_64_optional_archive
	evince-3.22.1-5.2.el7_4.src.rpm	84cb1970eb327b7ef529cd95a7f23cbf832df43cabb75b6dff0eda4d8b54abbb	ELSA-2020-3977	ol7_x86_64_u4_patch
	evince-3.22.1-5.2.el7_4.x86_64.rpm	5032214f0889c56111e13b04ba77cbe64dfe7faf922fbce89ac89b57d2514622	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-3.22.1-5.2.el7_4.x86_64.rpm	5032214f0889c56111e13b04ba77cbe64dfe7faf922fbce89ac89b57d2514622	ELSA-2020-3977	ol7_x86_64_u4_patch
	evince-browser-plugin-3.22.1-5.2.el7_4.x86_64.rpm	bd063bb37777798e9563b2f39329de4723b3d72ea0eb3a3ed19e09e91763aaa8	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-browser-plugin-3.22.1-5.2.el7_4.x86_64.rpm	bd063bb37777798e9563b2f39329de4723b3d72ea0eb3a3ed19e09e91763aaa8	ELSA-2020-3977	ol7_x86_64_u4_patch
	evince-devel-3.22.1-5.2.el7_4.i686.rpm	075b7ab248681d98e5a1fe354fa36ed2a1bf4ae4cfec40fda5d8dc4f766e8b77	ELSA-2020-3977	ol7_x86_64_optional_archive
	evince-devel-3.22.1-5.2.el7_4.x86_64.rpm	87c91d375645b7c80259abe690af37ed40ed13736dc31a14c4090754d7c88be4	ELSA-2020-3977	ol7_x86_64_optional_archive
	evince-dvi-3.22.1-5.2.el7_4.x86_64.rpm	94ff4b89d8f7303f49a35b4ab7948ed638e6c5b8798cb89b3614b568886534cd	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-dvi-3.22.1-5.2.el7_4.x86_64.rpm	94ff4b89d8f7303f49a35b4ab7948ed638e6c5b8798cb89b3614b568886534cd	ELSA-2020-3977	ol7_x86_64_u4_patch
	evince-libs-3.22.1-5.2.el7_4.i686.rpm	5334a6f1f8232114aad8ab139e63ad842cea74c99ea338d06a7f8377b8060fcd	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-libs-3.22.1-5.2.el7_4.i686.rpm	5334a6f1f8232114aad8ab139e63ad842cea74c99ea338d06a7f8377b8060fcd	ELSA-2020-3977	ol7_x86_64_u4_patch
	evince-libs-3.22.1-5.2.el7_4.x86_64.rpm	237b0eb866c772ce73675f80d243a859d3e69fed556c505dc69281e46e6b7318	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-libs-3.22.1-5.2.el7_4.x86_64.rpm	237b0eb866c772ce73675f80d243a859d3e69fed556c505dc69281e46e6b7318	ELSA-2020-3977	ol7_x86_64_u4_patch
	evince-nautilus-3.22.1-5.2.el7_4.x86_64.rpm	8b44861130daaac79d6c9300a66b45dc8a3f1074964abddd2ebc56b1116a1e9c	ELSA-2020-3977	ol7_x86_64_latest_archive
	evince-nautilus-3.22.1-5.2.el7_4.x86_64.rpm	8b44861130daaac79d6c9300a66b45dc8a3f1074964abddd2ebc56b1116a1e9c	ELSA-2020-3977	ol7_x86_64_u4_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team