SUSE alert openSUSE-SU-2026:21152-1 (atril)

From:
             
 
null@suse.de
To:
             
 
security-announce@lists.opensuse.org
Subject:
             
 
openSUSE-SU-2026:21152-1: important: Security update for atril
Date:
             
 
Tue, 30 Jun 2026 09:48:38 +0200
Message-ID:
             
 
<20260630074838.70380FF48@maintenance.suse.de>
Archive-link:
             
 
Article
openSUSE security update: security update for atril
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21152-1
Rating: important
References:

  * bsc#1265880



Cross-References:

  * CVE-2026-46519



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability and has one bug fix can now be installed.

Description:

This update for atril fixes the following issues:

Changes in atril:

- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 >= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI

- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with

- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-347=1

Package List:

- openSUSE Leap 16.0:

  atril-1.28.4-bp160.1.1
  atril-backends-1.28.4-bp160.1.1
  atril-devel-1.28.4-bp160.1.1
  atril-doc-1.28.4-bp160.1.1
  atril-lang-1.28.4-bp160.1.1
  atril-thumbnailer-1.28.4-bp160.1.1
  caja-extension-atril-1.28.4-bp160.1.1
  libatrildocument3-1.28.4-bp160.1.1
  libatrilview3-1.28.4-bp160.1.1
  typelib-1_0-AtrilDocument-1_5_0-1.28.4-bp160.1.1
  typelib-1_0-AtrilView-1_5_0-1.28.4-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-46519.html