These are all security issues fixed in the evince-40.4-1.3 package on the GA media of openSUSE Tumbleweed.
{
    "binaries": [
        {
            "libevdocument3-4": "40.4-1.3",
            "evince-plugin-psdocument": "40.4-1.3",
            "evince-plugin-dvidocument": "40.4-1.3",
            "evince-plugin-pdfdocument": "40.4-1.3",
            "typelib-1_0-EvinceView-3_0": "40.4-1.3",
            "evince": "40.4-1.3",
            "evince-plugin-comicsdocument": "40.4-1.3",
            "evince-lang": "40.4-1.3",
            "libevview3-3": "40.4-1.3",
            "typelib-1_0-EvinceDocument-3_0": "40.4-1.3",
            "evince-plugin-tiffdocument": "40.4-1.3",
            "nautilus-evince": "40.4-1.3",
            "evince-devel": "40.4-1.3",
            "evince-plugin-djvudocument": "40.4-1.3",
            "evince-plugin-xpsdocument": "40.4-1.3"
        }
    ]
}