tag 868500 pending thanks Hello,
Bug #868500 reported by you has been fixed in the Git repository. You can see the changelog below, and you can check the diff of the fix at: https://anonscm.debian.org/cgit/pkg-mate/atril.git/commit/?id=d382faf --- commit d382faf262ab92735199ada02c622e30a1dda27f Author: Santiago Ruano Rincón <santiag...@riseup.net> Date: Mon Jul 24 10:20:01 2017 +0200 upload to jessie-security (debian/1.8.1+dfsg1-4+deb8u1) diff --git a/debian/changelog b/debian/changelog index a4e94f8..c1fd0c5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,12 @@ +atril (1.8.1+dfsg1-4+deb8u1) jessie-security; urgency=high + + * Non-maintainer upload + * Add 0003-CVE-2017-1000083-evince-comics-remove-tar-commands-support-3-10-3.patch + Fixes a command injection vulnerability in CBT handler. CVE-2017-1000083 + (Closes: #868500) + + -- Santiago Ruano Rincón <santiag...@riseup.net> Fri, 21 Jul 2017 07:00:08 +0200 + atril (1.8.1+dfsg1-4) unstable; urgency=medium * debian/patches: