[SECURITY] [DSA 6332-1] okular security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6332-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
June 09, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : okular
CVE ID : not yet available
George Karagiannidis discovered multiple security vulnerabilities in
the fax backend of the Okular document viewer, which could potentially
result in the execution of arbitrary code if a malformed G3/G4 Fax file
is opened.
For the oldstable distribution (bookworm), this problem has been fixed
in version 4:22.12.3-1+deb12u1.
For the stable distribution (trixie), this problem has been fixed in
version 4:25.04.2-1+deb13u1.
We recommend that you upgrade your okular packages.
For the detailed security status of okular please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/okular
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=WIgA
-----END PGP SIGNATURE-----
Reply to: