A critical vulnerability (CVE-2026-46529) in the Evince, Atril, and Xreader PDF viewers allows for single-click remote code execution via argument injection in PDF `/GoToR` actions, which are leveraged to load arbitrary libraries through the `--gtk-module` option. Red Hat has rated this update as Important and released patched packages for Red Hat Enterprise Linux 8. Affected systems must apply the available security update, as detailed in the referenced advisory, to mitigate this risk.
Red Hat Product Errata RHSA-2026:28998 - Security Advisory Issued: 2026-06-24 Updated: 2026-06-24 RHSA-2026:28998 - Security Advisory Overview Updated Packages Synopsis Important: evince security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for evince is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Security Fix(es): atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2487669 - CVE-2026-46529 atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVEs CVE-2026-46529 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM evince-3.28.4-17.el8_10.src.rpm SHA-256: 606d4aa8ed2a0c35fea7409dc5cbc806edc23fe46a76cf4a0d98d9c1bad7ae29 x86_64 evince-3.28.4-17.el8_10.x86_64.rpm SHA-256: ab499148428efad7e4e6ef62c2066f5ee2789f1deb5a30e2b3d40bd1fa3509f2 evince-browser-plugin-3.28.4-17.el8_10.x86_64.rpm SHA-256: 558e501d423f7fbb73e687a3b797ec1086c4a551408ef65ff50c463d8da93e66 evince-browser-plugin-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: 6eed917c1f714437d2faf5cec75b439e3a9623aaee832fbafe422090ce550d0e evince-browser-plugin-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: fbd94b72b32e4a93e44629fd14a00eb0f179194e5dbc03dda9a2b727c64019e3 evince-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: b256f7783e5b125ed7edf18f224af1c8f80c977006c93ab4237d5854e53f4919 evince-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: 86d3a6466b308328d032f60a2fa4b2f3eb8748fe1fa32d860733484ed2dc4866 evince-debugsource-3.28.4-17.el8_10.i686.rpm SHA-256: dd40a030edefaf747e6ab52015720b03e7d059ef42362e2bd32836475f775862 evince-debugsource-3.28.4-17.el8_10.x86_64.rpm SHA-256: 0bbcc5da1ec8bb54c79b078b70fa1f274f55be9c81b0005520ce5dfc04b1cc32 evince-libs-3.28.4-17.el8_10.i686.rpm SHA-256: c3ab622ff706e2444254769ce1509934e2c9f6322244bb45b8309026652a9ee1 evince-libs-3.28.4-17.el8_10.x86_64.rpm SHA-256: 1aafcd5cb8ce1a3808aa15c6a8d8dc651d53896e07dc7ccbe9a1b2d3a43e5003 evince-libs-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: 7f7cec6f50a55345fb88537500767be0a73487363322ccf76ec8a3856715a1ba evince-libs-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: 91c76fea359e7a06f1e3ef7e79d60cf900d3f0fa2024ba539b40984cb88a2dc6 evince-nautilus-3.28.4-17.el8_10.x86_64.rpm SHA-256: 7b2d0136b6cd083e7c32743f2be5070a5849ee4fb4c8cf8a16bef71a7cf28c42 evince-nautilus-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: 6dc0060fb5d9a88c0d5683b21c3f89843abb96ac7ac8799ffa288ba352593c02 evince-nautilus-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: d4dd256175f61a3234a6742b16e389637dc8afe78ff49192028785341aa7cdc7 Red Hat Enterprise Linux for IBM z Systems 8 SRPM evince-3.28.4-17.el8_10.src.rpm SHA-256: 606d4aa8ed2a0c35fea7409dc5cbc806edc23fe46a76cf4a0d98d9c1bad7ae29 s390x evince-3.28.4-17.el8_10.s390x.rpm SHA-256: 7aaaef6962538eaf85fb42bc5895f5e8a6c66102ca19d81d4968a03fd064f44f evince-browser-plugin-3.28.4-17.el8_10.s390x.rpm SHA-256: 05ee397ef90bf3dba634ff513ca2ebee01259968d838a4b77668d3051055da74 evince-browser-plugin-debuginfo-3.28.4-17.el8_10.s390x.rpm SHA-256: 5566a278755f584a65b15b6fd1c8f968007c64457f041b3a2950035245662da1 evince-debuginfo-3.28.4-17.el8_10.s390x.rpm SHA-256: b274df6f07f01c5f4b87482f33c0cd7aa1bdde9fcf3349d0cc7eb9f0303b87b8 evince-debugsource-3.28.4-17.el8_10.s390x.rpm SHA-256: 84dfcf149516393ef161c7f6e89c7f07c87abe22bab608f12bc6d75d613d2695 evince-libs-3.28.4-17.el8_10.s390x.rpm SHA-256: 9c79386deff681c2a9c16850383cd3d9ec9039fa45ac5f3cb5c3426c8d7127ad evince-libs-debuginfo-3.28.4-17.el8_10.s390x.rpm SHA-256: 7620c7d40ab42a42cac05702707dd658f42b68c010f036dd37f32579d74b00c2 evince-nautilus-3.28.4-17.el8_10.s390x.rpm SHA-256: 47df87e190a3edacc33ea19caf86a1ef6250af7a8b684e0d7bb9e9c00d5cea12 evince-nautilus-debuginfo-3.28.4-17.el8_10.s390x.rpm SHA-256: ded0257f8f5a078517a48c0d9f941e684db62356d35b9a71e1a62686500e40ee Red Hat Enterprise Linux for Power, little endian 8 SRPM evince-3.28.4-17.el8_10.src.rpm SHA-256: 606d4aa8ed2a0c35fea7409dc5cbc806edc23fe46a76cf4a0d98d9c1bad7ae29 ppc64le evince-3.28.4-17.el8_10.ppc64le.rpm SHA-256: e74177cf9027b033a573c915d1e7fee17be5c040832214617531aa288e06abed evince-browser-plugin-3.28.4-17.el8_10.ppc64le.rpm SHA-256: 6bf7c178cb3063876c3373b3ea3b9ce9c377905d56286bae82d8351a76c2aeb2 evince-browser-plugin-debuginfo-3.28.4-17.el8_10.ppc64le.rpm SHA-256: dbf769ac53701d1457ae160c894f402028baa519a67cd1305820a2885d788265 evince-debuginfo-3.28.4-17.el8_10.ppc64le.rpm SHA-256: 62a127a5506cd57fb8ba82585a0629c00bf5584ea34e06d13cc468a7d7ace1b2 evince-debugsource-3.28.4-17.el8_10.ppc64le.rpm SHA-256: 1f9bc6df1c5f4ad7f4dc696e85442dbf87b87a7a596f4383df7b7c5e30d3505b evince-libs-3.28.4-17.el8_10.ppc64le.rpm SHA-256: c2007e5a50e3e9253be1fed54106da04bcb9e76ddb1a4485ff8a7f156af03333 evince-libs-debuginfo-3.28.4-17.el8_10.ppc64le.rpm SHA-256: 7f4860e40bea9b02fe235251e71a48de4f05ad85c47ec80459a804357250b45d evince-nautilus-3.28.4-17.el8_10.ppc64le.rpm SHA-256: 7f7a6619d8cd989770a96e746f6f83897857fb60cd8fbdf5377bb9e1460f67cf evince-nautilus-debuginfo-3.28.4-17.el8_10.ppc64le.rpm SHA-256: 197232d1d8cdb33a397f4ab4ac1f2d5b899f77f9bf2dff4b6489ffc8858605d5 Red Hat Enterprise Linux for ARM 64 8 SRPM evince-3.28.4-17.el8_10.src.rpm SHA-256: 606d4aa8ed2a0c35fea7409dc5cbc806edc23fe46a76cf4a0d98d9c1bad7ae29 aarch64 evince-3.28.4-17.el8_10.aarch64.rpm SHA-256: 62182d8d3f090dccc511a6dcad5dd9192e2ff113db2f54a7977155515e1eda9d evince-browser-plugin-3.28.4-17.el8_10.aarch64.rpm SHA-256: 07fb6100cc11a81d803474cd8b7a7419781dd83faa9c3f814148cbf09c412260 evince-browser-plugin-debuginfo-3.28.4-17.el8_10.aarch64.rpm SHA-256: bd064d20a0e71ad25b5fefb871a7410122b704feb91648e3e1806c50fa77b691 evince-debuginfo-3.28.4-17.el8_10.aarch64.rpm SHA-256: ed4b546444141129195fd4d8451f5ed31cac645a0e198ceaaa368666328fe853 evince-debugsource-3.28.4-17.el8_10.aarch64.rpm SHA-256: fd55731c4a1d2b223493db11655d99c166da096c1361c734a9adf626b2b7b99d evince-libs-3.28.4-17.el8_10.aarch64.rpm SHA-256: 31b54def9f659c9c2df0125109f91d140bf6ae7a1411efba11533c01c9f9bce5 evince-libs-debuginfo-3.28.4-17.el8_10.aarch64.rpm SHA-256: 1e68f21b9e3ca849f6475cb2a974e3260b6ca30277c7ac8118d20a7d62adf288 evince-nautilus-3.28.4-17.el8_10.aarch64.rpm SHA-256: 8c8d7597aa68f8879106db9de19acb788dbae93b8b7e5e907ba9757240d09e33 evince-nautilus-debuginfo-3.28.4-17.el8_10.aarch64.rpm SHA-256: 4907000373ce6e3463d9fee008eb7f2ae96c3a2b46ca30ef33babf2798433380 Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 evince-browser-plugin-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: 6eed917c1f714437d2faf5cec75b439e3a9623aaee832fbafe422090ce550d0e evince-browser-plugin-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: fbd94b72b32e4a93e44629fd14a00eb0f179194e5dbc03dda9a2b727c64019e3 evince-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: b256f7783e5b125ed7edf18f224af1c8f80c977006c93ab4237d5854e53f4919 evince-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: 86d3a6466b308328d032f60a2fa4b2f3eb8748fe1fa32d860733484ed2dc4866 evince-debugsource-3.28.4-17.el8_10.i686.rpm SHA-256: dd40a030edefaf747e6ab52015720b03e7d059ef42362e2bd32836475f775862 evince-debugsource-3.28.4-17.el8_10.x86_64.rpm SHA-256: 0bbcc5da1ec8bb54c79b078b70fa1f274f55be9c81b0005520ce5dfc04b1cc32 evince-devel-3.28.4-17.el8_10.i686.rpm SHA-256: 2e49923d9109698fd9ea22b7bba2ef177ba715c029d3f71f6035a7481b5e02ee evince-devel-3.28.4-17.el8_10.x86_64.rpm SHA-256: 79fb507d005a8e27178223040f98547cc79c279b57f1f187f588a82fff4074f3 evince-libs-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: 7f7cec6f50a55345fb88537500767be0a73487363322ccf76ec8a3856715a1ba evince-libs-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: 91c76fea359e7a06f1e3ef7e79d60cf900d3f0fa2024ba539b40984cb88a2dc6 evince-nautilus-debuginfo-3.28.4-17.el8_10.i686.rpm SHA-256: 6dc0060fb5d9a88c0d5683b21c3f89843abb96ac7ac8799ffa288ba352593c02 evince-nautilus-debuginfo-3.28.4-17.el8_10.x86_64.rpm SHA-256: d4dd256175f61a3234a6742b16e389637dc8afe78ff49192028785341aa7cdc7 Red Hat CodeReady Linux Builder for Power, little endian 8 SRPM ppc64le evince-browser-plugin-debuginfo-3.28.4-17.el8_10.ppc64le.rpm SHA-256: dbf769ac53701d1457ae160c894f402028baa519a67cd