Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 tig Important Editor Command Injection Issue Advisory 2026-0287

Calendar White Jul 21, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 mageia-theme Important Bugfix Security Fix 2026-0059

Calendar White Jul 21, 2026
Important
Debian Large Esm H900
Debian

Debian Linux Major Privilege Escalation Denial of Service Issues DSA-6393-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H900
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 12 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianimportant

Debian atril Important Command Injection Risk DSA-6349-1 CVE-2026-46529

It was discovered that atril, the MATE document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For the stable distribution (trixie), this problem has been fixed in version 1.26.2-4+deb13u1.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6349-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : atril CVE ID : CVE-2026-46529 Debian Bug : 1139874 It was discovered that atril, the MATE document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For the stable distribution (trixie), this problem has been fixed in version 1.26.2-4+deb13u1. We recommend that you upgrade your atril packages. For the detailed security status of atril please refer to its security tracker page at: https://security-tracker.debian.org/tracker/atril Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Advisory DSA-6349-1 details command injection risk in atril. Upgrade to fix.. atril command injection command vulnerability Debian. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 17, 2026 •Important Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianimportant

Debian Okular Important Code Execution Vulnerability DSA-6332-1

George Karagiannidis discovered multiple security vulnerabilities in the fax backend of the Okular document viewer, which could potentially result in the execution of arbitrary code if a malformed G3/G4 Fax file is opened. For the oldstable distribution (bookworm), this problem has been fixed. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6332-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : okular CVE ID : not yet available George Karagiannidis discovered multiple security vulnerabilities in the fax backend of the Okular document viewer, which could potentially result in the execution of arbitrary code if a malformed G3/G4 Fax file is opened. For the oldstable distribution (bookworm), this problem has been fixed in version 4:22.12.3-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 4:25.04.2-1+deb13u1. We recommend that you upgrade your okular packages. For the detailed security status of okular please refer to its security tracker page at: https://security-tracker.debian.org/tracker/okular Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Multiple vulnerabilities in Okular's fax backend could allow arbitrary code execution. Fix available for Debian Bookworm.. Okular Security Patch, Debian Advisory, Code Execution Risk. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 09, 2026 •Important Debian
Banner 2 1028x280 1708121730 1 1771599631
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorydebianimportant

Debian Evince Important Command Injection Risk DLA-4596-1 CVE-2026-46529

It was discovered that evince, a simple multi-page document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For Debian 11 bullseye, this problem has been fixed in version 3.38.2-1+deb11u1.. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4596-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Andreas Henriksson May 22, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : evince Version : 3.38.2-1+deb11u1 CVE ID : CVE-2026-46529 It was discovered that evince, a simple multi-page document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For Debian 11 bullseye, this problem has been fixed in version 3.38.2-1+deb11u1. We recommend that you upgrade your evince packages. For the detailed security status of evince please refer to its security tracker page at: https://security-tracker.debian.org/tracker/evince Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Evince on Debian LTS fixed command injection risk. Upgrade to 3.38.2-1+deb11u1 to secure PDF handling.. Debian LTS security, evince command injection, document viewer security, software update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 22, 2026 •Important Debian LTS
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisoryremote command executionpath traversal

Mageia 9: MGASA-2024-0224 Critical: Atril Path Traversal Issue

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The . MGASA-2024-0224 - Updated atril packages fix security vulnerability Publication date: 15 Jun 2024 URL: https://advisories.mageia.org/MGASA-2024-0224.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-52076 Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. (CVE-2023-52076) References: - https://bugs.mageia.org/show_bug.cgi?id=33282 - https://ubuntu.com/security/notices/USN-6808-1 - https://www.cve.org/CVERecord?id=CVE-2023-52076 SRPMS: - 9/core/atril-1.26.1-1.1.mga9 . Atril Document Viewer on Mageia receives crucial updates addressing a file write vulnerability that could potentially allow for Remote Code Execution.. Atril Document Viewer,Mageia Security,Path Traversal Fix,Remote Command Execution,Document Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 15, 2024 •Critical Mageia
Banner 2 1028x280 1708121730 1 1771599631
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorysecurity updatedebian

Debian DSA-5688-1: Atril Security Update for Document Viewer

It was discovered that missing input sanitising in the Atril document viewer could result in writing arbitrary files in the users home directory if a malformed epub document is opened. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5688-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : atril CVE ID : CVE-2023-52076 It was discovered that missing input sanitising in the Atril document viewer could result in writing arbitrary files in the users home directory if a malformed epub document is opened. For the oldstable distribution (bullseye), this problem has been fixed in version 1.24.0-1+deb11u1. This update also disables support for comic book archives, mitigating CVE-2023-51698. For the stable distribution (bookworm), this problem has been fixed in version 1.26.0-2+deb12u3. We recommend that you upgrade your atril packages. For the detailed security status of atril please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/atril Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Atril document viewer has released a new patch that resolves vulnerabilities related to input sanitization, enhancing the security of user files against corrupted document formats.. Atril Security Advisory, Debian Security Update, Document Viewer Issue, File Management, Input Handling. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 12, 2024 •Critical Debian
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorysecurity updatecode execution

Debian 9: DLA-2856-1 Moderate: Okular Code Execution Issue Fix

Code execution via an action link in a PDF document was fixed in the KDE document viewer Okular. For Debian 9 stretch, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2856-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk December 27, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : okular Version : 4:16.08.2-1+deb9u2 CVE ID : CVE-2020-9359 Debian Bug : 954891 Code execution via an action link in a PDF document was fixed in the KDE document viewer Okular. For Debian 9 stretch, this problem has been fixed in version 4:16.08.2-1+deb9u2. We recommend that you upgrade your okular packages. For the detailed security status of okular please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/okular Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS DLA-2858-1 addresses vulnerability in Krita image editor. Users should update for enhanced protection.. Okular Update, Debian Security, Document Viewer, Code Execution, DLA-2856-1. . LinuxSecurity.com Team

Calendar%202 Dec 27, 2021 Debian LTS
Banner 2 1028x280 1708121730 1 1771599631
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hat Enterprise Linuxlow severity

Red Hat: RHSA-2020-3977-01 Low: Evince And Poppler Security Update

An update for evince and poppler is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: evince and poppler security and bug fix update Advisory ID: RHSA-2020:3977-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:3977 Issue date: 2020-09-29 CVE Names: CVE-2019-14494 ==================================================================== 1. Summary: An update for evince and poppler is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: divide-by-zero in functionSplashOutputDev::tilingPatternFill in SplashOutputDev.cc (CVE-2019-14494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1610436 - Gtk-CRITICALs when scrolling in thumbnails bar in large file 1797453 - CVE-2019-14494 poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: evince-3.28.2-10.el7.src.rpm poppler-0.26.5-43.el7.src.rpm x86_64: evince-3.28.2-10.el7.x86_64.rpm evince-debuginfo-3.28.2-10.el7.i686.rpm evince-debuginfo-3.28.2-10.el7.x86_64.rpm evince-dvi-3.28.2-10.el7.x86_64.rpm evince-libs-3.28.2-10.el7.i686.rpm evince-libs-3.28.2-10.el7.x86_64.rpm evince-nautilus-3.28.2-10.el7.x86_64.rpm poppler-0.26.5-43.el7.i686.rpm poppler-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-glib-0.26.5-43.el7.i686.rpm poppler-glib-0.26.5-43.el7.x86_64.rpm poppler-qt-0.26.5-43.el7.i686.rpm poppler-qt-0.26.5-43.el7.x86_64.rpm poppler-utils-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v.7): x86_64: evince-browser-plugin-3.28.2-10.el7.x86_64.rpm evince-debuginfo-3.28.2-10.el7.i686.rpm evince-debuginfo-3.28.2-10.el7.x86_64.rpm evince-devel-3.28.2-10.el7.i686.rpm evince-devel-3.28.2-10.el7.x86_64.rpm poppler-cpp-0.26.5-43.el7.i686.rpm poppler-cpp-0.26.5-43.el7.x86_64.rpm poppler-cpp-devel-0.26.5-43.el7.i686.rpm poppler-cpp-devel-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-demos-0.26.5-43.el7.x86_64.rpm poppler-devel-0.26.5-43.el7.i686.rpm poppler-devel-0.26.5-43.el7.x86_64.rpm poppler-glib-devel-0.26.5-43.el7.i686.rpm poppler-glib-devel-0.26.5-43.el7.x86_64.rpm poppler-qt-devel-0.26.5-43.el7.i686.rpm poppler-qt-devel-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: poppler-0.26.5-43.el7.src.rpm x86_64: poppler-0.26.5-43.el7.i686.rpm poppler-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-qt-0.26.5-43.el7.i686.rpm poppler-qt-0.26.5-43.el7.x86_64.rpm poppler-utils-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: poppler-cpp-0.26.5-43.el7.i686.rpm poppler-cpp-0.26.5-43.el7.x86_64.rpm poppler-cpp-devel-0.26.5-43.el7.i686.rpm poppler-cpp-devel-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-demos-0.26.5-43.el7.x86_64.rpm poppler-devel-0.26.5-43.el7.i686.rpm poppler-devel-0.26.5-43.el7.x86_64.rpm poppler-glib-0.26.5-43.el7.i686.rpm poppler-glib-0.26.5-43.el7.x86_64.rpm poppler-glib-devel-0.26.5-43.el7.i686.rpm poppler-glib-devel-0.26.5-43.el7.x86_64.rpm poppler-qt-devel-0.26.5-43.el7.i686.rpm poppler-qt-devel-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: evince-3.28.2-10.el7.src.rpm poppler-0.26.5-43.el7.src.rpm ppc64: evince-3.28.2-10.el7.ppc64.rpm evince-debuginfo-3.28.2-10.el7.ppc.rpm evince-debuginfo-3.28.2-10.el7.ppc64.rpm evince-dvi-3.28.2-10.el7.ppc64.rpm evince-libs-3.28.2-10.el7.ppc.rpm evince-libs-3.28.2-10.el7.ppc64.rpm evince-nautilus-3.28.2-10.el7.ppc64.rpm poppler-0.26.5-43.el7.ppc.rpm poppler-0.26.5-43.el7.ppc64.rpm poppler-debuginfo-0.26.5-43.el7.ppc.rpm poppler-debuginfo-0.26.5-43.el7.ppc64.rpm poppler-glib-0.26.5-43.el7.ppc.rpm poppler-glib-0.26.5-43.el7.ppc64.rpm poppler-utils-0.26.5-43.el7.ppc64.rpm ppc64le: evince-3.28.2-10.el7.ppc64le.rpm evince-debuginfo-3.28.2-10.el7.ppc64le.rpm evince-dvi-3.28.2-10.el7.ppc64le.rpm evince-libs-3.28.2-10.el7.ppc64le.rpm evince-nautilus-3.28.2-10.el7.ppc64le.rpm poppler-0.26.5-43.el7.ppc64le.rpm poppler-debuginfo-0.26.5-43.el7.ppc64le.rpm poppler-glib-0.26.5-43.el7.ppc64le.rpm poppler-qt-0.26.5-43.el7.ppc64le.rpm poppler-utils-0.26.5-43.el7.ppc64le.rpm s390x: evince-3.28.2-10.el7.s390x.rpm evince-debuginfo-3.28.2-10.el7.s390.rpm evince-debuginfo-3.28.2-10.el7.s390x.rpm evince-dvi-3.28.2-10.el7.s390x.rpm evince-libs-3.28.2-10.el7.s390.rpm evince-libs-3.28.2-10.el7.s390x.rpm evince-nautilus-3.28.2-10.el7.s390x.rpm poppler-0.26.5-43.el7.s390.rpm poppler-0.26.5-43.el7.s390x.rpm poppler-debuginfo-0.26.5-43.el7.s390.rpm poppler-debuginfo-0.26.5-43.el7.s390x.rpm poppler-glib-0.26.5-43.el7.s390.rpm poppler-glib-0.26.5-43.el7.s390x.rpm poppler-utils-0.26.5-43.el7.s390x.rpm x86_64: evince-3.28.2-10.el7.x86_64.rpm evince-debuginfo-3.28.2-10.el7.i686.rpm evince-debuginfo-3.28.2-10.el7.x86_64.rpm evince-dvi-3.28.2-10.el7.x86_64.rpm evince-libs-3.28.2-10.el7.i686.rpm evince-libs-3.28.2-10.el7.x86_64.rpm evince-nautilus-3.28.2-10.el7.x86_64.rpm poppler-0.26.5-43.el7.i686.rpm poppler-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-glib-0.26.5-43.el7.i686.rpm poppler-glib-0.26.5-43.el7.x86_64.rpm poppler-qt-0.26.5-43.el7.i686.rpm poppler-qt-0.26.5-43.el7.x86_64.rpm poppler-utils-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: evince-browser-plugin-3.28.2-10.el7.ppc64.rpm evince-debuginfo-3.28.2-10.el7.ppc.rpm evince-debuginfo-3.28.2-10.el7.ppc64.rpm evince-devel-3.28.2-10.el7.ppc.rpm evince-devel-3.28.2-10.el7.ppc64.rpm poppler-cpp-0.26.5-43.el7.ppc.rpm poppler-cpp-0.26.5-43.el7.ppc64.rpm poppler-cpp-devel-0.26.5-43.el7.ppc.rpm poppler-cpp-devel-0.26.5-43.el7.ppc64.rpm poppler-debuginfo-0.26.5-43.el7.ppc.rpm poppler-debuginfo-0.26.5-43.el7.ppc64.rpm poppler-demos-0.26.5-43.el7.ppc64.rpm poppler-devel-0.26.5-43.el7.ppc.rpm poppler-devel-0.26.5-43.el7.ppc64.rpm poppler-glib-devel-0.26.5-43.el7.ppc.rpm poppler-glib-devel-0.26.5-43.el7.ppc64.rpm poppler-qt-0.26.5-43.el7.ppc.rpm poppler-qt-0.26.5-43.el7.ppc64.rpm poppler-qt-devel-0.26.5-43.el7.ppc.rpm poppler-qt-devel-0.26.5-43.el7.ppc64.rpm ppc64le: evince-browser-plugin-3.28.2-10.el7.ppc64le.rpm evince-debuginfo-3.28.2-10.el7.ppc64le.rpm evince-devel-3.28.2-10.el7.ppc64le.rpm poppler-cpp-0.26.5-43.el7.ppc64le.rpm poppler-cpp-devel-0.26.5-43.el7.ppc64le.rpm poppler-debuginfo-0.26.5-43.el7.ppc64le.rpm poppler-demos-0.26.5-43.el7.ppc64le.rpm poppler-devel-0.26.5-43.el7.ppc64le.rpm poppler-glib-devel-0.26.5-43.el7.ppc64le.rpm poppler-qt-devel-0.26.5-43.el7.ppc64le.rpm s390x: evince-browser-plugin-3.28.2-10.el7.s390x.rpm evince-debuginfo-3.28.2-10.el7.s390.rpm evince-debuginfo-3.28.2-10.el7.s390x.rpm evince-devel-3.28.2-10.el7.s390.rpm evince-devel-3.28.2-10.el7.s390x.rpm poppler-cpp-0.26.5-43.el7.s390.rpm poppler-cpp-0.26.5-43.el7.s390x.rpm poppler-cpp-devel-0.26.5-43.el7.s390.rpm poppler-cpp-devel-0.26.5-43.el7.s390x.rpm poppler-debuginfo-0.26.5-43.el7.s390.rpm poppler-debuginfo-0.26.5-43.el7.s390x.rpm poppler-demos-0.26.5-43.el7.s390x.rpm poppler-devel-0.26.5-43.el7.s390.rpm poppler-devel-0.26.5-43.el7.s390x.rpm poppler-glib-devel-0.26.5-43.el7.s390.rpm poppler-glib-devel-0.26.5-43.el7.s390x.rpm poppler-qt-0.26.5-43.el7.s390.rpm poppler-qt-0.26.5-43.el7.s390x.rpm poppler-qt-devel-0.26.5-43.el7.s390.rpm poppler-qt-devel-0.26.5-43.el7.s390x.rpm x86_64: evince-browser-plugin-3.28.2-10.el7.x86_64.rpm evince-debuginfo-3.28.2-10.el7.i686.rpm evince-debuginfo-3.28.2-10.el7.x86_64.rpm evince-devel-3.28.2-10.el7.i686.rpm evince-devel-3.28.2-10.el7.x86_64.rpm poppler-cpp-0.26.5-43.el7.i686.rpm poppler-cpp-0.26.5-43.el7.x86_64.rpm poppler-cpp-devel-0.26.5-43.el7.i686.rpm poppler-cpp-devel-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-demos-0.26.5-43.el7.x86_64.rpm poppler-devel-0.26.5-43.el7.i686.rpm poppler-devel-0.26.5-43.el7.x86_64.rpm poppler-glib-devel-0.26.5-43.el7.i686.rpm poppler-glib-devel-0.26.5-43.el7.x86_64.rpm poppler-qt-devel-0.26.5-43.el7.i686.rpm poppler-qt-devel-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: evince-3.28.2-10.el7.src.rpm poppler-0.26.5-43.el7.src.rpm x86_64: evince-3.28.2-10.el7.x86_64.rpm evince-debuginfo-3.28.2-10.el7.i686.rpm evince-debuginfo-3.28.2-10.el7.x86_64.rpm evince-dvi-3.28.2-10.el7.x86_64.rpm evince-libs-3.28.2-10.el7.i686.rpm evince-libs-3.28.2-10.el7.x86_64.rpm evince-nautilus-3.28.2-10.el7.x86_64.rpm poppler-0.26.5-43.el7.i686.rpm poppler-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-glib-0.26.5-43.el7.i686.rpm poppler-glib-0.26.5-43.el7.x86_64.rpm poppler-qt-0.26.5-43.el7.i686.rpm poppler-qt-0.26.5-43.el7.x86_64.rpm poppler-utils-0.26.5-43.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.7): x86_64: evince-browser-plugin-3.28.2-10.el7.x86_64.rpm evince-debuginfo-3.28.2-10.el7.i686.rpm evince-debuginfo-3.28.2-10.el7.x86_64.rpm evince-devel-3.28.2-10.el7.i686.rpm evince-devel-3.28.2-10.el7.x86_64.rpm poppler-cpp-0.26.5-43.el7.i686.rpm poppler-cpp-0.26.5-43.el7.x86_64.rpm poppler-cpp-devel-0.26.5-43.el7.i686.rpm poppler-cpp-devel-0.26.5-43.el7.x86_64.rpm poppler-debuginfo-0.26.5-43.el7.i686.rpm poppler-debuginfo-0.26.5-43.el7.x86_64.rpm poppler-demos-0.26.5-43.el7.x86_64.rpm poppler-devel-0.26.5-43.el7.i686.rpm poppler-devel-0.26.5-43.el7.x86_64.rpm poppler-glib-devel-0.26.5-43.el7.i686.rpm poppler-glib-devel-0.26.5-43.el7.x86_64.rpm poppler-qt-devel-0.26.5-43.el7.i686.rpm poppler-qt-devel-0.26.5-43.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-14494 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBX3OjytzjgjWX9erEAQg+WA//S9AxwyBHWq+hF+Bc8D7jLcma3rKBIJFY apkbmTL5CwKLV9DbFlryslfveYDMimhBEcHvGLqr+BjVUT2UamHv0vw1Fly7agJl ZnY4TS2Rc2/JJonqT61zH4NoCHrsMs47nnRXF6wAGVbNiG7GSdDYT8hcGKP8PAPo pW2S8BS+WEx99TmGZ4IMaf5NMEb9nVg8tKKpdcSLDaoxYYzTuY5dhnvxcDkAMDd4 eaN+9rpBBggtJsNCwq4QexVwwx2Ocl9KSPZyE6xpnpZkbDss8LerhvLr3HKKzJbM rwxWM87pfm/rVOuxXSLcOr9bNl+rv8eOeyx5tvClndcn41FayBlDGgrPw05GU+uP I6do8v7s+5dWNOYyIvxUb/qbB1/Sq3yHX17iQ7XmglQ1P7qqhhxQaFG26/tNhCnP UfkwK0EATl1EAMVQvyKVxQ5jiLS/i92YA/X4lHZHmgGLPbjYUKvxg3Enn5tZ1iP1 acSl6/tMfKdipWALKB62rSFjW3+ZFsWLeDlSA+BahPZVPJcvnuNU09JyUVwOrj/x dS9IAElPF1h/fQ1WnhIAf7Assh9sNJv4Ps4hd0cRWi1YfS8tkb55niLQk1fEfmFW WesSFDbLpqx/O5nfZQiyfgzrgSh/kH+0ekkQTFBA4hdMXiqBtdnEbgVbPV+wAnJA nIByLudtUGk=bPOk -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . New security patch released for Evince and Poppler in Red Hat. Minor risk mitigated from vulnerabilities. Urgent response recommended.. Evince Update, Poppler Security, Red Hat Enterprise, Linux Update, Security Fix. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Sep 29, 2020 •Low Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatesecurity update

Red Hat Enterprise Linux 7: RHSA-2020:1173-01 Moderate: Okular Security Fix

An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: okular security update Advisory ID: RHSA-2020:1173-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1173 Issue date: 2020-03-31 CVE Names: CVE-2018-1000801 ==================================================================== 1. Summary: An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others. Security Fix(es): * okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp (CVE-2018-1000801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the Referencessection. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1626265 - CVE-2018-1000801 okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: okular-4.10.5-8.el7.src.rpm x86_64: okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-part-4.10.5-8.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: okular-4.10.5-8.el7.src.rpm ppc64le: okular-4.10.5-8.el7.ppc64le.rpm okular-debuginfo-4.10.5-8.el7.ppc64le.rpm okular-devel-4.10.5-8.el7.ppc64le.rpm okular-libs-4.10.5-8.el7.ppc64le.rpm okular-part-4.10.5-8.el7.ppc64le.rpm x86_64: okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-part-4.10.5-8.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: okular-4.10.5-8.el7.src.rpm x86_64: okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-part-4.10.5-8.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2018-1000801 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/7.8_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXoOcgNzjgjWX9erEAQjoAQ//du1ZkuKyr3fPdqg1TevacRXEcfdXEQ5T Z3wm+blxkNcDb1+jZ7xIXASwMwWZm7rtXGI01YVuTZObzRYc9zCHFytG7Ij/F7C4 M/K4EwDCvoPFxQVuoRzuRB5rwJ+nYwiM2UAFfEd0/jYE44iWadaOn4zYToiH9PqW /JgS2tQZl8ssBP/sG7E4pcmmFOK3084HMerb3bFr5SsqrfnYlXgCdKDecozBpP7S dOqGPC0wthQk/j0cY5+WJOWiwIpBozQt9pZStvl912ZU3Uq4Md464P80IHHP42uh pF4/M6C7wegAJ9ipncnZfAdGC/Jn0vE2X8SlpisyjjVvzLugq9tJBt2yiuFq36eK YEhBT+qSMahs+IZg5GNF+qe1J3C+nuwQVZciIX2E/5QTE+bCN6Y9uFqoZ2X+7WkN dzu8Qm5tSmPuEzo2czGfNhSgX3tudjcW8sQkXTGiGGQHTOmBPy/3G7CCVSkbM7hu ERbHxkA8LYbt8z/sTYkqAKBi5gjfKCmSdQUQ/u/IdDQI69Ij7e+rB5sX7ZKMtVYR U+5QfR0GyBsNSYCdbJ5hd2+1f9OYzdR5BcvMd97Lh61VGu1pL9md70umowYnBUTY IEwJqIBpCen5sL3y17ascfXq/ViahZsaOknai2N4WZfnL8h5aNgK8YtRVv3z5+z2 XskXuDj8u+k=69H3 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://access.redhat.com/security/updates/advisory . Red Hat Security Advisory has issued a significant patch for Okular on RHEL 7, targeting vulnerabilities in the document viewer that could compromise system integrity.. Red Hat Enterprise Linux, Okular Security Update, Moderate Update, Document Viewer Security. . LinuxSecurity.com Team

Calendar%202 Mar 31, 2020 Red Hat
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics