OESA-2024-1246

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1246

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1246.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2024-1246

Upstream

CVE-2023-52076

Published

2024-03-08T11:07:08Z

Modified

2025-09-03T06:19:42.591979Z

Summary

atril security update

Details

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.

Security Fix(es):

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability.(CVE-2023-52076)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP4 / atril

Package

Name: atril
Purl: pkg:rpm/openEuler/atril&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.22.3-3.oe2003sp4

Ecosystem specific

{
    "src": [
        "atril-1.22.3-3.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "atril-1.22.3-3.oe2003sp4.aarch64.rpm",
        "atril-debuginfo-1.22.3-3.oe2003sp4.aarch64.rpm",
        "atril-debugsource-1.22.3-3.oe2003sp4.aarch64.rpm",
        "atril-devel-1.22.3-3.oe2003sp4.aarch64.rpm",
        "atril-libs-1.22.3-3.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "atril-devel-1.22.3-3.oe2003sp4.x86_64.rpm",
        "atril-libs-1.22.3-3.oe2003sp4.x86_64.rpm",
        "atril-debugsource-1.22.3-3.oe2003sp4.x86_64.rpm",
        "atril-1.22.3-3.oe2003sp4.x86_64.rpm",
        "atril-debuginfo-1.22.3-3.oe2003sp4.x86_64.rpm"
    ]
}