[ubuntu/trusty-security] evince 3.10.3-0ubuntu10.4 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Dec 4 14:13:52 UTC 2017
evince (3.10.3-0ubuntu10.4) trusty-security; urgency=medium
* SECURITY UPDATE: command injection in dvi backend
- debian/patches/CVE-2017-1000159.patch: properly quote filename in
backend/dvi/dvi-document.c.
- CVE-2017-1000159
Date: 2017-11-30 20:25:20.136297+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/evince/3.10.3-0ubuntu10.4
-------------- next part --------------
Sorry, changesfile not available.
More information about the Trusty-changes
mailing list