atril 1.26.4

epub: use g_strndup for parsing document path
epub: validate epub content before parsing

atril 1.26.3

epub: Avoid crash when index list has extraneous entry
fix a incompatible pointer type warning for gcc14
Fix build with libxml2 2.12
fix memleak
pdf: Always use poppler_document_save to avoid data loss
ev-application: Quote user-supplied strings in ev_spawn command line

This update has been submitted for testing by robert.

a month ago

This update's test gating status has been changed to 'ignored'.

a month ago

This update has been pushed to testing.

a month ago

This update has been submitted for stable by bodhi.

a month ago

This update has been pushed to stable.

4 weeks ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a month ago

in testing

a month ago

in stable

4 weeks ago

approved

a month ago

Builds

atril-1.26.4-1.el8

BZ#2260373 CVE-2023-52076 atril: Path traversal in Atril can lead to arbitrary file write and possible arbitrary code execution

BZ#2260375 TRIAGE CVE-2023-52076 atril: Path traversal in Atril can lead to arbitrary file write and possible arbitrary code execution [epel-all]

BZ#2487669 CVE-2026-46529 atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

BZ#2487899 CVE-2026-46529 atril: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen [epel-all]

atril-1.26.4-1.el8

Automated Test Results

ignored