Evince Vulnerability: evince bug fix and enhancement update

evince Updated 02 Oct 2025

Summary

10/05/2022

Disclosed on

N/A

Severity

Yes i

Fix available

Unrated

Severity

Not published

CVSS Score

ALBA-2022:1770: evince bug fix and enhancement update. Affects evince versions < 3.28.4-16.el8. Fixed in 3.28.4-16.el8. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

Evince is a document viewer for multiple document formats, including PDF, PostScript, and DjVu. It is commonly used in Linux distributions, including AlmaLinux. Evince provides a user-friendly interface for viewing and navigating documents. However, a vulnerability has been identified in Evince that requires an update to fix and enhance its security features.

Vulnerability Detail

The vulnerability in Evince is related to a bug that could potentially be exploited by attackers. The bug allows for unauthorized access or execution of malicious code, which could lead to various security risks. This vulnerability affects versions of Evince prior to 3.28.4-16.el8 in AlmaLinux 8. It is crucial to update Evince to the fixed version to mitigate the risk of exploitation.

How To Fix

Minimum fixed version

3.28.4-16.el8

This is the first release that contains the fix.

sudo dnf update evince

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Conclusion

It is crucial to update Evince to the fixed version to mitigate the risk of exploitation. By updating the package, you ensure that the vulnerability is addressed and the security of your system is enhanced. For further support on vulnerability remediation, you can reach out to DevNack.com.

See every vulnerability recorded for evince →