CVE catalog

CVE-2026-46519

atril-1.28.4-1.1 on GA media

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: May 31, 2026, 12:00:00 AM UTC
Updated: Jun 30, 2026, 6:24:45 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.42% · Oct 25, 2026

This update for atril fixes the following issues: Changes in atril: - Update to version 1.28.4 (bsc#1265880 CVE-2026-46519): * Build fixes * Fix tests imported from XReader * Fix tests with AT-SPI2 >= 2.53 * Improve search system * pdf: Always use poppler_document_save to avoid data loss * Use properties for can-zoom-in and -out * libview: Allow zooming to the limits of the scale * shell: Fix Max zoom in UI - Update to version 1.28.2: * epub: Disable thumbnailing sidebar * Fix .cbr mimetype * Wayland: stop segfaults on some systems * replace deprecated gtk_menu_tool_button_new_from_stock * libview/ev-document-model.c remove one more deprecation warning * replace ev_document_model_get_dual_page with - Update to version 1.28.1: * Update CBR library to libarchive in README.md * ci: fix travis build failures caused by recent travis changes * Cleanup icons Makefile * icons: Include higher resolution icons * Updated translations.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Opensuse	atril	leap 16.0	`1.28.4-bp160.1.1`	fixed
Opensuse	atril	tumbleweed	`1.28.4-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Opensuse	atril	rpm	leap 16.0	`1.28.4-bp160.1.1`	Not reported	OPENSUSE-SU-2026:21152-1	Not reported
Opensuse	atril	rpm	tumbleweed	`1.28.4-1.1`	Not reported	OPENSUSE-SU-2026:10914-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[atril-backends]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[atril-devel]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[atril-doc]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · noarch · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[atril-lang]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · noarch · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[atril-thumbnailer]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[caja-extension-atril]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[libatrildocument3]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[libatrilview3]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[typelib-1_0-AtrilDocument-1_5_0]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[typelib-1_0-AtrilView-1_5_0]Unknown
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.28.4-1.1
  Version impact unknown
  pypi · atril · opensuse · tumbleweed
[atril]Fixed
Source package: [atril]
Details (1)
- 1.28.4-1.3 · x86_64 · tumbleweed
  Fixed · Fixed: 1.28.4-1.1
  pypi · atril · opensuse · tumbleweed

Observed: Oct 27, 2026, 7:18:57 AM UTC

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]