Back Linuxsecurity

Ubuntu Atril USN-8839

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

Several security issues were fixed in Atril. Software Description: - atril: Official Document Viewer of the MATE Desktop Environment Details: It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. (CVE-2026-46529) It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-1010006) Andy Nguyen discovered that Atril incorrectly handled certain images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-11459)

Several security issues were fixed in Atril.

Software Description:

- atril: Official Document Viewer of the MATE Desktop Environment

It was discovered that Atril did not properly sanitize command-line

arguments in PDF /GoToR actions. If a user opened a specially crafted PDF

file, an attacker could possibly use this issue to execute arbitrary code.

It was discovered that Atril incorrectly handled certain PDF files. An

attacker could possibly use this issue to cause a denial of service or

to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.

Andy Nguyen discovered that Atril incorrectly handled certain images. An

attacker could possibly use this issue to expose sensitive information.

This issue only affected Ubuntu 16.04 LTS. (CVE-2019-11459)

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS atril 1.28.2-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS atril 1.26.2-3ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS atril 1.26.0-1ubuntu1.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS atril 1.24.0-1ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS atril 1.20.1-2ubuntu2+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS atril 1.12.2-1ubuntu0.3+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2019-1010006, CVE-2019-11459, CVE-2026-46529

Ubuntu Security Notice USN-8839-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Found in Atril Document Viewer Atril, the official document viewer for the MATE desktop environment, has multiple vulnerabilities affecting Ubuntu 16.04 LTS. The most critical issue (CVE-2026-46529) allows arbitrary code execution via specially crafted PDF files due to improper sanitization of command-line arguments. Other vulnerabilities (CVE-2019-1010006 and CVE-2019-11459) could lead to denial of service and exposure of sensitive information, respectively. All vulnerabilities are specific to Ubuntu 16.04 LTS. Users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed in a security notice (USN-8839-1) published on September 28, 2026. The issues have been confirmed and patches are available through standard system updates. 2 sources 45

Extracted Entities

Ubuntu Atril USN-8839

The full story

Extracted Entities

Companies (1)

CVEs (3)

Platforms (1)