-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 16 Jun 2026 08:29:50 +0200
Source: atril
Architecture: source
Version: 1.26.0-2+deb12u4
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian+Ubuntu MATE Packaging Team <debian-mate@lists.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Closes: 1139874
Changes:
 atril (1.26.0-2+deb12u4) bookworm-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-46529: command line argument injection (Closes: #1139874)
Checksums-Sha1:
 94fc19d0d65d7165e21224a31555e8370d83fb62 3114 atril_1.26.0-2+deb12u4.dsc
 9a124d7396c5a9a16fdd082cf58737d00cd1ac6e 1370712 atril_1.26.0.orig.tar.xz
 38c14f2c4573dd2f4b3b5e7bf6e99cadc6993a43 45588 atril_1.26.0-2+deb12u4.debian.tar.xz
 4f77bbaec9f9042399ae3c3b3812892ac5c1194a 9736 atril_1.26.0-2+deb12u4_source.buildinfo
Checksums-Sha256:
 0557595e355a4d2904fb16d585cc202a681258f41d59a5f89e4e6c51c0629012 3114 atril_1.26.0-2+deb12u4.dsc
 cb707c8c6821d8c45a7ca121e308ce06de64c99f1b010f4f348bd15555db625d 1370712 atril_1.26.0.orig.tar.xz
 b9f64b738c2a726e1eca3f4245101e7e90c1476a40ab5bfba55b8fa4f0f25eea 45588 atril_1.26.0-2+deb12u4.debian.tar.xz
 aa024f8fdb6a0f08c3c18bf6197d710fb93c3e220a3931a31e8a9d17db3f7606 9736 atril_1.26.0-2+deb12u4_source.buildinfo
Files:
 df264453a54e0da0040b03b6a9651fd9 3114 x11 optional atril_1.26.0-2+deb12u4.dsc
 b94ebf65e276a6666f35f91dbcafce4a 1370712 x11 optional atril_1.26.0.orig.tar.xz
 8d3e92e7c90465370baf577c36556a0c 45588 x11 optional atril_1.26.0-2+deb12u4.debian.tar.xz
 c90c87bce01ab57631a3afbf62e751ff 9736 x11 optional atril_1.26.0-2+deb12u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmow8B0ACgkQC8R9xk0T
Uwbo6A/+LoKYuuB7mWOJAciSibAg+kgwiyWF98YzbFmurWgLrsuFHOVpG+P/mxBZ
mesprD35XllCtYDneYCUwgv+uO/ujOG8JaDqBBzCht2WnD26PJjm3gh+yI7amek+
aUYe4cfLLIIndFLKDyAfBXjR7SdLvdjcXYaxzosg3wy3HNPLjY2V3Qisi6E+Mxlo
21aLu9+GK5MkUxh4S/3ywIW/+j2zrNbgE+GKjryd7bpaeCIymqBbfD8CvkDx898Y
zXC+xz1FFcZADSIaQ+ny3XAEs0bBEOZBkzI53Nad5oTrxryrzta5IfZsf6PSkUgh
q5V65nlrfuchiVsQo/bJuK0eqKrOmbMgYj5Pa6w1YHSUs0dU3o43aTTYuBotlNgA
VjUrPlhXPm0j7zTG+VeWJRUrcur0B3STVpRABST9lwxJsNMBNABbA+zxh+CzGBaq
hiCz4ddY0lgbqahPXs16PGj+RxwXcrRV6xhd/eJL5dodKNSg+VU9syMu2Sqj3StW
uW4h6SXH3cAfWTbm2WKPn9c4g/JHO6fyWxInYg9hSH5RWzSzPtPgn2i+FIin1Qc5
LTwrKuootocGWmd7oXBUUG5E6A9UB7QKopS+LkEQbYK43Y+TqLwmdXhBH5Rj0AIT
C7/uDfQ12Wc15Hys4H5lW3SfRNLGonw2ix8N9s74OSSEEwFNGgc=
=cIHG
-----END PGP SIGNATURE-----