-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 16 Jun 2026 09:16:44 +0200
Source: atril
Architecture: source
Version: 1.26.2-4+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian+Ubuntu MATE Packaging Team <debian-mate@lists.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Closes: 1139874
Changes:
 atril (1.26.2-4+deb13u1) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-46529: command line argument injection (Closes: #1139874)
Checksums-Sha1:
 ab93319f7a06d48f64b1b4ae49029544d9613f8f 3126 atril_1.26.2-4+deb13u1.dsc
 887b2af873ff3d5f1a6863a461fcba887c5459c1 1446416 atril_1.26.2.orig.tar.xz
 ab509abfd9539d1045d37722f9ba30be0839894f 22196 atril_1.26.2-4+deb13u1.debian.tar.xz
 82cefcb05f7687f850042d5b2ad3dcd4cb603269 9736 atril_1.26.2-4+deb13u1_source.buildinfo
Checksums-Sha256:
 b6ec337c9d585f9319946c010df031cd206536aae41c99158e9470447d79fb68 3126 atril_1.26.2-4+deb13u1.dsc
 e3638b52552ea7cd71db81602ffecd2d39b99eab46336eaec11b30e6f5b475af 1446416 atril_1.26.2.orig.tar.xz
 740b17f93cfebdd8b9692101fca023968be9136709ee6ee4554e02dabd32e22a 22196 atril_1.26.2-4+deb13u1.debian.tar.xz
 e725caa2032d6ee60daf65582f815d3f383c366ceb3afe21dae250707f815824 9736 atril_1.26.2-4+deb13u1_source.buildinfo
Files:
 c9ecf180ae08a4887fa2dcec0e81cc85 3126 x11 optional atril_1.26.2-4+deb13u1.dsc
 e020f5af934b90705bd69146c89f3577 1446416 x11 optional atril_1.26.2.orig.tar.xz
 08dc9712db0b6bc9cc0e96dbeb587f8c 22196 x11 optional atril_1.26.2-4+deb13u1.debian.tar.xz
 e75f86f6bd549b238f8207b7fab63065 9736 x11 optional atril_1.26.2-4+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmow+HwACgkQC8R9xk0T
Uwaqug//boEDdXNTevBDuXfCiQb/q/zJpgAD7naMU3UBQEaP6cgIw0rIZLS2Igs/
5LDzxweO6PtnJ/jzPGmzjeWaef3QEcUtZnPWHJgFjJ6DKXLdtaiIfEe/dHjv6NzX
tLep+L8TxptYWbU+U7dgzlrPTvQHkGqHrTKtVGgQ+WxLDv2O2ALlfTDEagV+ckII
Wk9rIkOvfKHnWwz6s3ihG9YxCj3hPyghNeOMVoPtYpsbsboFB4U/IXf43ymVUGCN
81bPjqa/6yv08g3DnqAeQ3RWYts7v/nH5omR9TIPYah2gj9F3ihIO/+l+sPuclNI
o+vPe4lN1MTK7/5Uh/b2XefzTdipR4WjPjFJ0veJnR66ZwQvarG1JVr1quvyKGmO
TRXbil992ODfU476csP+/hqyh0vDu6nnzri/XAjzTzhvC2elzGiNsXXxKbYVWSfh
vBZaf/63rE9aYGWJ5CX9UbJ04hRkYerFoQYFS/7PRIY9uA0UmfB04itI5XPXEdMX
QZ4teOVzE6Mas12cKl4Or9y1Vpbh4xoboMaAkxmYR0kSW6DpYQJ9JBD0zTqMl4ng
TKyc01eTwApNfIyTSKq/nDMoxAqeEqhNYv7f7hXSYHFm5jOEGR8E1jbFj3cTKUdB
zJEb71NZ3majQcLE8ZAPuoiER1E3ZxjYIkF+7yNdgB+DGfXOsJE=
=x9eS
-----END PGP SIGNATURE-----