A critical vulnerability (CVE-2026-46529, CVSS 7.8 HIGH) in the Evince document viewer allows for single-click remote code execution via a crafted PDF file containing a malicious `/GoToR` action that enables argument injection and subsequent module loading. The security update addresses this flaw for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Affected systems should apply the provided update, specifically version evince-40.5-2.el9_4.1.
Red Hat Product Errata RHSA-2026:33416 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33416 - Security Advisory Overview Updated Packages Synopsis Important: evince security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for evince is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Security Fix(es): atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2487669 - CVE-2026-46529 atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVEs CVE-2026-46529 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM evince-40.5-2.el9_4.1.src.rpm SHA-256: 5ff4eed89132543df68ec00a5432aa89ec1ba14cbc9bbf29222f58b8522ac40d x86_64 evince-40.5-2.el9_4.1.x86_64.rpm SHA-256: f933f8dc9cce6917c7c736c79388ddd18cada23084a9036b5710e4004e580d12 evince-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: b3e7795ae8ce8a435d6f25dd1b1dfcd95c6f10b0e2f8c55f9d627506e4c51725 evince-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: cac75949fd1040c52b1233904aea227f47f98b95d04755245f5314ddc350966d evince-debugsource-40.5-2.el9_4.1.i686.rpm SHA-256: 32ec0fe08db157ae334d1f9b8c667393b7053271970fafe2e6c711a1c1850461 evince-debugsource-40.5-2.el9_4.1.x86_64.rpm SHA-256: 22f46683809b48c231d672d63e1604b3d0c7a92b35be86551b0a1147969bc08b evince-dvi-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: e1850c21a5917b078f897bfe7a9f9efbcde388cecfac737cd2bfc8eaa9b7d791 evince-dvi-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 664e5533cf5ad3fd48efe63728b88be9a9455ced7f497aff55628760b3c9afc2 evince-libs-40.5-2.el9_4.1.i686.rpm SHA-256: 6879619f6451df7ef78e905f0fe3297740dde0a58f7c26adbc35f9f2457fbe81 evince-libs-40.5-2.el9_4.1.x86_64.rpm SHA-256: 0ce06e009ae2a64c3b4467e6fbb20c9131729df435b2dff9e23f247faa3ce0a2 evince-libs-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: f6950b23c0831913b50194a5f528ec9a1ea8d707dd68ebff48e04f424010e4c6 evince-libs-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 423f31143cac9d840585e615270ed157e28428a706dfc42049e77f7819308081 evince-nautilus-40.5-2.el9_4.1.x86_64.rpm SHA-256: 9538d3aeac78ec78e9d73a348c099a9493b12d0f5ca740ee518ef5617c014029 evince-nautilus-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: f19e2b8e502a754e13e59fd0aea2c70ec475a85e18b7c6f00e2eba6427e7fb86 evince-nautilus-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 136b9a0cefb21603220a9af6e73e79189a9b55c34a2eda86c1ddbc2fc34951be evince-previewer-40.5-2.el9_4.1.x86_64.rpm SHA-256: 875be91c53a56a05664480a619f4192cbb47a02751a3f43d47e07dc30265c039 evince-previewer-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: 8ccb6c2ee169b522199e9707b20b5abb5b620585655bdc696c1da04c8ce18f96 evince-previewer-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 9dd873cad70fa056b0f48f92981adcaf5edc6a92b4a3bf294188e57f68923160 evince-thumbnailer-40.5-2.el9_4.1.x86_64.rpm SHA-256: a3e279b232dd4c15f2b90944296ddd156e30c5c4048fa804d941ada52d3a1355 evince-thumbnailer-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: b5d74716c32f89e899cf532573b8f0a29dc82948427b0727d2f7738b8cbebdfe evince-thumbnailer-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: bd71bba816abcceb614efc033e93b5c13283bef78226c31068eac1504b432e65 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM evince-40.5-2.el9_4.1.src.rpm SHA-256: 5ff4eed89132543df68ec00a5432aa89ec1ba14cbc9bbf29222f58b8522ac40d ppc64le evince-40.5-2.el9_4.1.ppc64le.rpm SHA-256: f6a9cbbac1b6b52398e72d41e4cadcd49152643b55989007d80cabdedf36ba59 evince-debuginfo-40.5-2.el9_4.1.ppc64le.rpm SHA-256: b713775ef3cfd4fb8f5fa5de93b515c75fd90bf996005c207cd79822bca73dd9 evince-debugsource-40.5-2.el9_4.1.ppc64le.rpm SHA-256: 9b7d42cf0b3d4fbc824f404deda6b9dbdbeac65a54ee4d0a2299e044b54e54eb evince-dvi-debuginfo-40.5-2.el9_4.1.ppc64le.rpm SHA-256: ec115da1020d9f61741b44a90d531f7b8edc6a32d101b2e2b2111a71ab2ed5e1 evince-libs-40.5-2.el9_4.1.ppc64le.rpm SHA-256: bfbcd4df7953453f2af43e92369387c6023268c82a8d05cb880abd95a972c419 evince-libs-debuginfo-40.5-2.el9_4.1.ppc64le.rpm SHA-256: 2201897997096c9b06524d2a8ae8879078daae3525ebaa3207c8fd2a26c78a96 evince-nautilus-40.5-2.el9_4.1.ppc64le.rpm SHA-256: 8c8d026ea3da2ef7c102360624287cfb39830c1ecc5d460a91974c50e4244254 evince-nautilus-debuginfo-40.5-2.el9_4.1.ppc64le.rpm SHA-256: 8eec8e55954842b8725fea8fcbd9ed502e2689acdeca350491433b48f3e27349 evince-previewer-40.5-2.el9_4.1.ppc64le.rpm SHA-256: dc620cb0fc9bcf871b7dca74fe84293662f9e013bbf1264de6dc017037b669e4 evince-previewer-debuginfo-40.5-2.el9_4.1.ppc64le.rpm SHA-256: cac5f70ed71d810a56e92005923a9b20be89e3e14f063a0d19feeb354009ff94 evince-thumbnailer-40.5-2.el9_4.1.ppc64le.rpm SHA-256: 1ba552465a95a6c06e5b8f90c2ed3a300a2cca73559dbf47dcd4a151cb76ac8d evince-thumbnailer-debuginfo-40.5-2.el9_4.1.ppc64le.rpm SHA-256: ec2e4511df648ffa427aecdaa0f64915dbbb9e012bbe4a206939d7c35a39d084 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM evince-40.5-2.el9_4.1.src.rpm SHA-256: 5ff4eed89132543df68ec00a5432aa89ec1ba14cbc9bbf29222f58b8522ac40d x86_64 evince-40.5-2.el9_4.1.x86_64.rpm SHA-256: f933f8dc9cce6917c7c736c79388ddd18cada23084a9036b5710e4004e580d12 evince-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: b3e7795ae8ce8a435d6f25dd1b1dfcd95c6f10b0e2f8c55f9d627506e4c51725 evince-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: cac75949fd1040c52b1233904aea227f47f98b95d04755245f5314ddc350966d evince-debugsource-40.5-2.el9_4.1.i686.rpm SHA-256: 32ec0fe08db157ae334d1f9b8c667393b7053271970fafe2e6c711a1c1850461 evince-debugsource-40.5-2.el9_4.1.x86_64.rpm SHA-256: 22f46683809b48c231d672d63e1604b3d0c7a92b35be86551b0a1147969bc08b evince-dvi-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: e1850c21a5917b078f897bfe7a9f9efbcde388cecfac737cd2bfc8eaa9b7d791 evince-dvi-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 664e5533cf5ad3fd48efe63728b88be9a9455ced7f497aff55628760b3c9afc2 evince-libs-40.5-2.el9_4.1.i686.rpm SHA-256: 6879619f6451df7ef78e905f0fe3297740dde0a58f7c26adbc35f9f2457fbe81 evince-libs-40.5-2.el9_4.1.x86_64.rpm SHA-256: 0ce06e009ae2a64c3b4467e6fbb20c9131729df435b2dff9e23f247faa3ce0a2 evince-libs-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: f6950b23c0831913b50194a5f528ec9a1ea8d707dd68ebff48e04f424010e4c6 evince-libs-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 423f31143cac9d840585e615270ed157e28428a706dfc42049e77f7819308081 evince-nautilus-40.5-2.el9_4.1.x86_64.rpm SHA-256: 9538d3aeac78ec78e9d73a348c099a9493b12d0f5ca740ee518ef5617c014029 evince-nautilus-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: f19e2b8e502a754e13e59fd0aea2c70ec475a85e18b7c6f00e2eba6427e7fb86 evince-nautilus-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 136b9a0cefb21603220a9af6e73e79189a9b55c34a2eda86c1ddbc2fc34951be evince-previewer-40.5-2.el9_4.1.x86_64.rpm SHA-256: 875be91c53a56a05664480a619f4192cbb47a02751a3f43d47e07dc30265c039 evince-previewer-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: 8ccb6c2ee169b522199e9707b20b5abb5b620585655bdc696c1da04c8ce18f96 evince-previewer-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: 9dd873cad70fa056b0f48f92981adcaf5edc6a92b4a3bf294188e57f68923160 evince-thumbnailer-40.5-2.el9_4.1.x86_64.rpm SHA-256: a3e279b232dd4c15f2b90944296ddd156e30c5c4048fa804d941ada52d3a1355 evince-thumbnailer-debuginfo-40.5-2.el9_4.1.i686.rpm SHA-256: b5d74716c32f89e899cf532573b8f0a29dc82948427b0727d2f7738b8cbebdfe evince-thumbnailer-debuginfo-40.5-2.el9_4.1.x86_64.rpm SHA-256: bd71bba816abcceb614efc033e93b5c13283bef78226c31068eac1504b432e65 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM evince-40.5-2.el9_4.1.src.rpm SHA-256: 5ff4eed89132543df68ec00a5432aa89ec1ba14cbc9bbf29222f58b8522ac40d aarch64 evince-40.5-2.el9_4.1.aarch64.rpm SHA-256: a770f9c78d3222a913a25636e4c3c759c03752d2ecfc1ef3314bfbad9eb0317c evince-debuginfo-40.5-2.el9_4.1.aarch64.rpm SHA-256: adb7e0831bc0b3da867763bda3a3ae5fdb43e259fe4e864baa588f9baac61cc8 evince-debugsource-40.5-2.el9_4.1.aarch64.rpm SHA-256: f368bbbb716f7d8bb4f9de8ca4412bd4c9fd207b5d766c781b0da446d00e4273 evince-dvi-debuginfo-40.5-2.el9_4.1.aarch64.rpm SHA-256: c89909bd23236f78a37e969956032d1a501b598a562714fb38912cec8531c1cd evince-libs-40.5-2.el9_4.1.aarch64.rpm SHA-256: 65c4426507764c46809bb2898