Skip to content
OpenAdvisories
High ELSA-2026-28998 1 CVE

Important: evince security update (Oracle Linux 8)

Published Jun 24, 2026 · Updated Jun 24, 2026

Ecosystem: Oracle Linux

Summary

[3.28.4-17]
- Fix CVE-2026-46529: quote string arguments passed to ev_spawn
- Resolves: RHEL-184039

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 evince 0:3.28.4-17.el8_10
Oracle Linux · 8 evince-browser-plugin 0:3.28.4-17.el8_10
Oracle Linux · 8 evince-devel 0:3.28.4-17.el8_10
Oracle Linux · 8 evince-libs 0:3.28.4-17.el8_10
Oracle Linux · 8 evince-nautilus 0:3.28.4-17.el8_10

Vulnerabilities 1

  • High 8.4
    CVE-2026-46529 Public exploit

    PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

    Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tri…

    mate-desktop atril evince atril Debian Ubuntu Alpine