Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "evince-dbg": "3.10.3-0ubuntu10.4", "libevince-dev-dbgsym": "3.10.3-0ubuntu10.4", "libevince-dev": "3.10.3-0ubuntu10.4", "evince-gtk": "3.10.3-0ubuntu10.4", "evince-common": "3.10.3-0ubuntu10.4", "libevview3-3": "3.10.3-0ubuntu10.4", "gir1.2-evince-3.0": "3.10.3-0ubuntu10.4", "evince-dbgsym": "3.10.3-0ubuntu10.4", "evince": "3.10.3-0ubuntu10.4", "libevview3-3-dbgsym": "3.10.3-0ubuntu10.4", "gir1.2-evince-3.0-dbgsym": "3.10.3-0ubuntu10.4", "libevdocument3-4": "3.10.3-0ubuntu10.4", "libevdocument3-4-dbgsym": "3.10.3-0ubuntu10.4", "evince-gtk-dbgsym": "3.10.3-0ubuntu10.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libatrildocument3": "1.12.2-1ubuntu0.3", "atril-dbg": "1.12.2-1ubuntu0.3", "atril-dbgsym": "1.12.2-1ubuntu0.3", "atril-common": "1.12.2-1ubuntu0.3", "libatrilview3": "1.12.2-1ubuntu0.3", "libatrilview3-dbgsym": "1.12.2-1ubuntu0.3", "libatrilview3-dbg": "1.12.2-1ubuntu0.3", "gir1.2-atril": "1.12.2-1ubuntu0.3", "atril": "1.12.2-1ubuntu0.3", "libatrildocument3-dbgsym": "1.12.2-1ubuntu0.3", "libatrildocument-dev": "1.12.2-1ubuntu0.3", "libatrildocument3-dbg": "1.12.2-1ubuntu0.3", "libatrilview-dev": "1.12.2-1ubuntu0.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "evince-dbg": "3.18.2-1ubuntu4.3", "evince-dbgsym": "3.18.2-1ubuntu4.3", "evince": "3.18.2-1ubuntu4.3", "evince-common": "3.18.2-1ubuntu4.3", "libevview3-3-dbgsym": "3.18.2-1ubuntu4.3", "libevince-dev": "3.18.2-1ubuntu4.3", "evince-gtk": "3.18.2-1ubuntu4.3", "gir1.2-evince-3.0": "3.18.2-1ubuntu4.3", "libevdocument3-4": "3.18.2-1ubuntu4.3", "libevdocument3-4-dbgsym": "3.18.2-1ubuntu4.3", "libevview3-3": "3.18.2-1ubuntu4.3" } ] }