USN-4024-1
evince update
As a security improvement, this update adjusts the AppArmor profile for the Evince thumbnailer to reduce access to the system and adjusts the AppArmor profile for Evince and Evince previewer to limit access to the DBus system bus. Additionally adjust the evince abstraction to disallow writes on parent directories of sensitive files.
What each source reports
OSV No score
evince update
As a security improvement, this update adjusts the AppArmor profile for the Evince thumbnailer to reduce access to the system and adjusts the AppArmor profile for Evince and Evince previewer to limit access to the DBus system bus. Additionally adjust the evince abstraction to disallow writes on parent directories of sensitive files.
- Record
USN-4024-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
evinceUbuntu:16.04:LTS |
before 3.18.2-1ubuntu4.5, plus listed versions 3.16.1-0ubuntu13.18.1-1ubuntu13.18.1-1ubuntu23.18.2-1ubuntu13.18.2-1ubuntu2 Show 6 moreShow less3.18.2-1ubuntu33.18.2-1ubuntu43.18.2-1ubuntu4.13.18.2-1ubuntu4.23.18.2-1ubuntu4.33.18.2-1ubuntu4.4 |
3.18.2-1ubuntu4.5 |
evinceUbuntu:18.04:LTS |
before 3.28.4-0ubuntu1.2, plus listed versions 3.26.0-13.26.0-23.26.0-33.27.91-13.27.92-1 Show 4 moreShow less3.28.0-13.28.2-13.28.4-0ubuntu13.28.4-0ubuntu1.1 |
3.28.4-0ubuntu1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4024-1 is a vulnerability with no CVSS score yet in evince, published June 19, 2019. No source lists public exploit code. Fixed in evince 3.18.2-1ubuntu4.5.