RLSA-2026:28998

Synopsis

Important: evince security update

Description

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.

Security Fix(es):

* atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2487669

CVEs

CVE-2026-46529

Affected packages

Rocky Linux 8 aarch64 - AppStream

evince-0:3.28.4-17.el8_10.aarch64.rpm evince-0:3.28.4-17.el8_10.src.rpm evince-browser-plugin-0:3.28.4-17.el8_10.aarch64.rpm evince-browser-plugin-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm evince-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm evince-debugsource-0:3.28.4-17.el8_10.aarch64.rpm evince-libs-0:3.28.4-17.el8_10.aarch64.rpm evince-libs-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm evince-nautilus-0:3.28.4-17.el8_10.aarch64.rpm evince-nautilus-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

evince-0:3.28.4-17.el8_10.src.rpm evince-0:3.28.4-17.el8_10.x86_64.rpm evince-browser-plugin-0:3.28.4-17.el8_10.x86_64.rpm evince-browser-plugin-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm evince-debuginfo-0:3.28.4-17.el8_10.i686.rpm evince-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm evince-debugsource-0:3.28.4-17.el8_10.i686.rpm evince-debugsource-0:3.28.4-17.el8_10.x86_64.rpm evince-libs-0:3.28.4-17.el8_10.i686.rpm evince-libs-0:3.28.4-17.el8_10.x86_64.rpm evince-libs-debuginfo-0:3.28.4-17.el8_10.i686.rpm evince-libs-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm evince-nautilus-0:3.28.4-17.el8_10.x86_64.rpm evince-nautilus-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - PowerTools

evince-devel-0:3.28.4-17.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - PowerTools

evince-devel-0:3.28.4-17.el8_10.i686.rpm evince-devel-0:3.28.4-17.el8_10.x86_64.rpm