Skip to content
OpenAdvisories
High ELSA-2026-41904 1 CVE

Important: evince security update (Oracle Linux 7)

Published Aug 10, 2026 · Updated Aug 10, 2026

Ecosystem: Oracle Linux

Summary

[3.28.2-10.0.1]
- Fix CVE-2026-46529 [Orabug: 39757172]

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 evince 0:3.28.2-10.0.1.el7
Oracle Linux · 7 evince-browser-plugin 0:3.28.2-10.0.1.el7
Oracle Linux · 7 evince-devel 0:3.28.2-10.0.1.el7
Oracle Linux · 7 evince-dvi 0:3.28.2-10.0.1.el7
Oracle Linux · 7 evince-libs 0:3.28.2-10.0.1.el7
Oracle Linux · 7 evince-nautilus 0:3.28.2-10.0.1.el7

Vulnerabilities 1

  • High 8.4
    CVE-2026-46529 Public exploit

    PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

    Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tri…

    mate-desktop atril evince atril Debian Ubuntu Alpine