Debian alert DLA-4597-1 (atril)

From:
             
 
Andreas Henriksson <andreas@fatal.se>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4597-1] atril security update
Date:
             
 
Fri, 22 May 2026 23:33:38 +0200
Message-ID:
             
 
<dcmjiqactysy6zc6l3qie7ypkcyunfrk22p2fzpecdvemvxulu@oyok3nwukijd>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4597-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Andreas Henriksson
May 22, 2026                                  https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : atril
Version        : 1.24.0-1+deb11u2
CVE ID         : CVE-2026-46529

It was discovered that atril, a simple multi-page document viewer, is
prone to a command injection vulnerability if a specially crafted PDF
file is opened.

For Debian 11 bullseye, this problem has been fixed in version
1.24.0-1+deb11u2.

We recommend that you upgrade your atril packages.

For the detailed security status of atril please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/atril

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=WfUE
-----END PGP SIGNATURE-----