Skip to content
OpenAdvisories
High ELSA-2026-27819 1 CVE

Important: evince security update (Oracle Linux 9)

Published Jun 23, 2026 · Updated Jun 23, 2026

Ecosystem: Oracle Linux

Summary

[40.5-4.el9_8.1]
- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 evince 0:40.5-4.el9_8.1
Oracle Linux · 9 evince-libs 0:40.5-4.el9_8.1
Oracle Linux · 9 evince-nautilus 0:40.5-4.el9_8.1
Oracle Linux · 9 evince-previewer 0:40.5-4.el9_8.1
Oracle Linux · 9 evince-thumbnailer 0:40.5-4.el9_8.1

Vulnerabilities 1

  • High 8.4
    CVE-2026-46529 Public exploit

    PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

    Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tri…

    mate-desktop atril evince atril Debian Ubuntu Alpine