A critical vulnerability (CVE-2026-46529, CVSS 7.8 HIGH) in the Evince document viewer allows remote code execution via a single-click attack vector, where a malicious PDF file exploits an argument injection flaw in the `/GoToR` action to load arbitrary GTK modules. This security update addresses the flaw for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Telecommunications Update Service. The fixed packages are provided in the advisory, such as `evince-3.28.4-16.el8_8.1` for the x86_64 architecture.
Red Hat Product Errata RHSA-2026:42692 - Security Advisory Issued: 2026-07-21 Updated: 2026-07-21 RHSA-2026:42692 - Security Advisory Overview Updated Packages Synopsis Important: evince security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for evince is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Security Fix(es): atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2487669 - CVE-2026-46529 atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVEs CVE-2026-46529 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM evince-3.28.4-16.el8_8.1.src.rpm SHA-256: 6cfb5e003abf9b24f75bbaffcd967da61b771943bca375bb783a232196ddb15f x86_64 evince-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 7105bd290148f8fdc1b9aa31021c55fdb5e828dcc9693a1740f24afdeb25ee18 evince-browser-plugin-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 14dc1879b324268e4c30a3d2ee13f0b5e53bbd64b3cdbfcffad053948adde77a evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 8ee94d9aa28745544d6d556cf7a45c5c05e03f7d67210f46daafe54026eeafc4 evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 47758a2dddf69b30c2904eeeeb27b30dd45212dc4a77a25d30af9536af9a3f11 evince-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: d97d1ba908981b4ff8958b0d11c29c238e577fa3f048b416644a142928c6ca85 evince-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 21bccbede7e2288cf650c5fed955ecc74b89dc5de52a7acdb9444f313463fb2f evince-debugsource-3.28.4-16.el8_8.1.i686.rpm SHA-256: d1f6218b16bf7109ce44d1ef42e88f854f22c7dc5db9f7d60384e888623912a2 evince-debugsource-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 10aa12635cdb7e66569c3c20b7d6e4ef4580c0e77068c7532ae8acdc3cf00534 evince-libs-3.28.4-16.el8_8.1.i686.rpm SHA-256: e124b5bdb6fd7c76759b604b2ec40559dfc377605819920307dc9534080b31ca evince-libs-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 8c479e995c7a075ef85645436d21bc04296fbe0e3635d4549adff9b102767aca evince-libs-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 3605a48ab62feb3d1709cf75ce231200f475b2c9a633e35604d9c347ccbf284f evince-libs-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 942d33531a2d17da414242d15567b8bfc5e9c6a683df7070b103e7b3d0354f42 evince-nautilus-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: f910bd779ad318e0572091a96d9d6411a2002d8bb4d7ad8cdc185ccac87fddad evince-nautilus-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 97069deb7b3b8baf8e17b9639788c4f3da5cf4f7c22af0aa811da94874f010cc evince-nautilus-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 829b3db75bd20e5ba3c27ba7db131ca66d0b943a31b7b9ac3dbd31ce7eae0373 Red Hat Enterprise Linux Server - TUS 8.8 SRPM evince-3.28.4-16.el8_8.1.src.rpm SHA-256: 6cfb5e003abf9b24f75bbaffcd967da61b771943bca375bb783a232196ddb15f x86_64 evince-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 7105bd290148f8fdc1b9aa31021c55fdb5e828dcc9693a1740f24afdeb25ee18 evince-browser-plugin-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 14dc1879b324268e4c30a3d2ee13f0b5e53bbd64b3cdbfcffad053948adde77a evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 8ee94d9aa28745544d6d556cf7a45c5c05e03f7d67210f46daafe54026eeafc4 evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 47758a2dddf69b30c2904eeeeb27b30dd45212dc4a77a25d30af9536af9a3f11 evince-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: d97d1ba908981b4ff8958b0d11c29c238e577fa3f048b416644a142928c6ca85 evince-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 21bccbede7e2288cf650c5fed955ecc74b89dc5de52a7acdb9444f313463fb2f evince-debugsource-3.28.4-16.el8_8.1.i686.rpm SHA-256: d1f6218b16bf7109ce44d1ef42e88f854f22c7dc5db9f7d60384e888623912a2 evince-debugsource-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 10aa12635cdb7e66569c3c20b7d6e4ef4580c0e77068c7532ae8acdc3cf00534 evince-libs-3.28.4-16.el8_8.1.i686.rpm SHA-256: e124b5bdb6fd7c76759b604b2ec40559dfc377605819920307dc9534080b31ca evince-libs-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 8c479e995c7a075ef85645436d21bc04296fbe0e3635d4549adff9b102767aca evince-libs-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 3605a48ab62feb3d1709cf75ce231200f475b2c9a633e35604d9c347ccbf284f evince-libs-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 942d33531a2d17da414242d15567b8bfc5e9c6a683df7070b103e7b3d0354f42 evince-nautilus-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: f910bd779ad318e0572091a96d9d6411a2002d8bb4d7ad8cdc185ccac87fddad evince-nautilus-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 97069deb7b3b8baf8e17b9639788c4f3da5cf4f7c22af0aa811da94874f010cc evince-nautilus-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 829b3db75bd20e5ba3c27ba7db131ca66d0b943a31b7b9ac3dbd31ce7eae0373 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM evince-3.28.4-16.el8_8.1.src.rpm SHA-256: 6cfb5e003abf9b24f75bbaffcd967da61b771943bca375bb783a232196ddb15f ppc64le evince-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: 2ba2c39ac7da6dc863098ac5424822c0f4126e8f999713c3512db75b1eddd88b evince-browser-plugin-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: 7c79d909c6a84f76b937ee3caed944830783cb6f659dd64db864e447be0f3680 evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: e8c19526297ef57679c85221a3a8ffe679379f679e3d5524c0b4be4206053168 evince-debuginfo-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: 90329ed2bd9b1576bc802d25dd3ae63c43b63df2d213e936144a41a80a8a3b55 evince-debugsource-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: 679f914011945690326f6bcce4f365d096d975a4f7fe851b827b9d19712f582a evince-libs-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: ad31363863b91c64be061052885c4b7abad59ac4f1a4c021451548a00bd6d1a7 evince-libs-debuginfo-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: 7c4f1a196656228315097ffa60b34e85b828b57856d04c8e6e3e4a887205ad33 evince-nautilus-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: a39ba1fa1e3bfe9ae3a68529617d92013611da72562cabc3b1f31dbf258aa005 evince-nautilus-debuginfo-3.28.4-16.el8_8.1.ppc64le.rpm SHA-256: a9acdc34963c04430bc89ae3f7bdc020f9b1bb06a3cbd17af73fc88ccdc72b62 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM evince-3.28.4-16.el8_8.1.src.rpm SHA-256: 6cfb5e003abf9b24f75bbaffcd967da61b771943bca375bb783a232196ddb15f x86_64 evince-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 7105bd290148f8fdc1b9aa31021c55fdb5e828dcc9693a1740f24afdeb25ee18 evince-browser-plugin-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 14dc1879b324268e4c30a3d2ee13f0b5e53bbd64b3cdbfcffad053948adde77a evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 8ee94d9aa28745544d6d556cf7a45c5c05e03f7d67210f46daafe54026eeafc4 evince-browser-plugin-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 47758a2dddf69b30c2904eeeeb27b30dd45212dc4a77a25d30af9536af9a3f11 evince-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: d97d1ba908981b4ff8958b0d11c29c238e577fa3f048b416644a142928c6ca85 evince-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 21bccbede7e2288cf650c5fed955ecc74b89dc5de52a7acdb9444f313463fb2f evince-debugsource-3.28.4-16.el8_8.1.i686.rpm SHA-256: d1f6218b16bf7109ce44d1ef42e88f854f22c7dc5db9f7d60384e888623912a2 evince-debugsource-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 10aa12635cdb7e66569c3c20b7d6e4ef4580c0e77068c7532ae8acdc3cf00534 evince-libs-3.28.4-16.el8_8.1.i686.rpm SHA-256: e124b5bdb6fd7c76759b604b2ec40559dfc377605819920307dc9534080b31ca evince-libs-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 8c479e995c7a075ef85645436d21bc04296fbe0e3635d4549adff9b102767aca evince-libs-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 3605a48ab62feb3d1709cf75ce231200f475b2c9a633e35604d9c347ccbf284f evince-libs-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 942d33531a2d17da414242d15567b8bfc5e9c6a683df7070b103e7b3d0354f42 evince-nautilus-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: f910bd779ad318e0572091a96d9d6411a2002d8bb4d7ad8cdc185ccac87fddad evince-nautilus-debuginfo-3.28.4-16.el8_8.1.i686.rpm SHA-256: 97069deb7b3b8baf8e17b9639788c4f3da5cf4f7c22af0aa811da94874f010cc evince-nautilus-debuginfo-3.28.4-16.el8_8.1.x86_64.rpm SHA-256: 829b3db75bd20e5ba3c27ba7db131ca66d0b943a31b7b9ac3dbd31ce7eae0373 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .