-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 May 2026 22:57:16 +0200 Source: atril Architecture: source Version: 1.24.0-1+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian+Ubuntu MATE Packaging Team <debian-mate@lists.debian.org> Changed-By: Andreas Henriksson <andreas@fatal.se> Changes: atril (1.24.0-1+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-46529: PDF /GoToR action argv injection enables single-click RCE * Update libatrildocument3.symbols for comics disabled - avoids symbols diff warning when building, see previous revision. Checksums-Sha1: e65b9a0ee118f32d351c8c3d4788a15d6a510eea 3119 atril_1.24.0-1+deb11u2.dsc 3c85711975b525c57200b025c39977b0825b74cc 1343864 atril_1.24.0.orig.tar.xz 8ffd9fb7f03e2eb44ff38916c9245f68751ae2f5 21136 atril_1.24.0-1+deb11u2.debian.tar.xz 3fdf7a7a3e906f585eee1986dd7e1aee955cd696 9728 atril_1.24.0-1+deb11u2_source.buildinfo Checksums-Sha256: 194c0fe2d8e3b29a6f09d4dcf01ecec7850559b385a9b036a9016ef65579a5a4 3119 atril_1.24.0-1+deb11u2.dsc 69f2a8f2e43cf697d080dcb27a1ac6036e14f45c4de597d19ce9d01b9af3ce40 1343864 atril_1.24.0.orig.tar.xz 02311e4a3227ef6cd646144708574f466f8de6a3b96dd2ab10f1111edd3aee92 21136 atril_1.24.0-1+deb11u2.debian.tar.xz cdeccc1a48f9b770861f3958b0088fda1199fbfacd6d0ecd7d2f42cac9a756bf 9728 atril_1.24.0-1+deb11u2_source.buildinfo Files: f0ea0b926d66f3917ff6d92d70cee9d1 3119 x11 optional atril_1.24.0-1+deb11u2.dsc 6a40fe6321d5fca3eb842661a8b0938a 1343864 x11 optional atril_1.24.0.orig.tar.xz 5763429a40f64d27839fb0bead4e2b41 21136 x11 optional atril_1.24.0-1+deb11u2.debian.tar.xz 1424e25d14328a24f74c2a5541f0e9d0 9728 x11 optional atril_1.24.0-1+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmoQxXcACgkQC8R9xk0T UwZG7BAAk5LEmCUzmM3OGs+NJ7op2keLAALe8YcPkzRKWdxANbyrNMfyjNXd91f7 K/KQvhU2OPLW/6438URjtnr97ARYs2nPo7WCeuYXFa0+cxPaYXBo1QRvUbbVH+r5 P4LdCXRDZRXgM7c8fxPsNWNTRYJw+AP1baqIXLeEjw5Rd8Yflsd9/9+fSghQk4yz OhMAZtRbonDeSgtVA4ypDTT+Y6qxaUyROuOivIwryYoGjuLqfMe3R+WZVLDY8NmO /PNHWE19y78/JbsHnUJSxqKCJoJs+IAYYy0WyqGFxLAuVRuRf8i8lcEXZDbwJwEm nyvNUvx/p6D/SIpBatxIrhCnJKaIW1tZ1STBSTIguT/bmKzv12u89Ay2SAj22G1f UjO1yerFfPS/UR2NaKQAB70snL2Ior1zcUzyteH7gYxFGZjY48MWOCA7iRZuLeun FyBiE7nPpimCEdOBZc+IPBMNsZ/W1OAw4GZelLpToo1GeZjBn7hlEJ4r5XNyreXg Bh4MQyJxzgkRQ/N+keGwe4OrC2poaHMmYptPJibh7NSMlY4aizxqThU+3/6cbMU6 Acct3/9LsTlCqAeemsiGIkF9uv7Kkpil3BkOIXKya5tQxMwIBbAY7TRZ0oXYaGRK /AuINgibyf9YX221W6E15gbgMkOqY4YFGTjWENNXroTxq8qLp6k= =sSTK -----END PGP SIGNATURE-----