OESA-2024-1612

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1612

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1612.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2024-1612

Upstream

CVE-2023-51698

Published

2024-05-17T11:08:03Z

Modified

2025-08-12T05:39:55.961699Z

Summary

atril security update

Details

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.

Security Fix(es):

Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:22.03-LTS-SP2 / atril

Package

Name: atril
Purl: pkg:rpm/openEuler/atril&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.22.3-4.oe2203sp2

Ecosystem specific

{
    "x86_64": [
        "atril-1.22.3-4.oe2203sp2.x86_64.rpm",
        "atril-debuginfo-1.22.3-4.oe2203sp2.x86_64.rpm",
        "atril-debugsource-1.22.3-4.oe2203sp2.x86_64.rpm",
        "atril-libs-1.22.3-4.oe2203sp2.x86_64.rpm",
        "atril-devel-1.22.3-4.oe2203sp2.x86_64.rpm"
    ],
    "aarch64": [
        "atril-debuginfo-1.22.3-4.oe2203sp2.aarch64.rpm",
        "atril-libs-1.22.3-4.oe2203sp2.aarch64.rpm",
        "atril-debugsource-1.22.3-4.oe2203sp2.aarch64.rpm",
        "atril-devel-1.22.3-4.oe2203sp2.aarch64.rpm",
        "atril-1.22.3-4.oe2203sp2.aarch64.rpm"
    ],
    "src": [
        "atril-1.22.3-4.oe2203sp2.src.rpm"
    ]
}