Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian 10 DLA-3828-1 Moderate: Atril Code Execution Threat

debian lts
Calendar Grey June 15, 2024
Dist Debian Esm H88
Debian LTS DLA-3828-1 announcement addresses atril vulnerabilities associated with CVE-2023-52076; crucial upgrade details provided.
A vulnerability was discovered in Atril, a simple document viewer designed for the MATE desktop environment
Topics%20covered

Topics Covered

security advisory code execution debian input sanitization atril

Summary

CVE-2023-52076

A missing input sanitising could result in writing arbitrary files if a
malformed epub document is opened, that could result in arbitrary code
execution.

For Debian 10 buster, these problems have been fixed in version
1.20.3-1+deb10u2. This update also disables support for comic book archives,
mitigating CVE-2023-51698.

We recommend that you upgrade your atril packages.

For the detailed security status of atril please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/atril

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
important
Lowest
Low
Medium
High
Critical

Package: atril
Version: 1.20.3-1+deb10u2
CVE ID: CVE-2023-52076
Debian Bug: 1061522

Topics%20covered

Topics Covered

security advisory code execution debian input sanitization atril

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here