ALSA-2026:27819

[ALSA-2026:27819] Important: evince security update

Type:

security

Severity:

important

Release date:

2026-07-02

Description:

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.  

Security Fix(es):  

  * atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	evince-previewer-40.5-4.el9_8.1.aarch64.rpm	07eea5e4d8d0e853b4a3db5e3961b26657aab6593af719dae8ae0ac6e58d0f00
aarch64	evince-40.5-4.el9_8.1.aarch64.rpm	33ff9a422732421acdf603bc500719c28783328b4c9c167a818b1907f2b8a9e3
aarch64	evince-libs-40.5-4.el9_8.1.aarch64.rpm	e95089086ad83f44b27fcad00f77c174e9a26bb8c1c4a0e7f1635d03dd8e4e8c
aarch64	evince-nautilus-40.5-4.el9_8.1.aarch64.rpm	ed033700c3b7a44069a516a316d714da5fb703b8f505291e9209747b45f5eb9a
aarch64	evince-thumbnailer-40.5-4.el9_8.1.aarch64.rpm	f63aa0d8071377bf3ed787383353faf86f23f021156bbf4efdc57260ae07a091
i686	evince-libs-40.5-4.el9_8.1.i686.rpm	e38ade428a9a5735615bf5868a813f95c49b8941b7a675cb37b4a0a4eb02592b
ppc64le	evince-previewer-40.5-4.el9_8.1.ppc64le.rpm	0b6917c9efeb3656f85a28cabaa7996466c291344d7d363c150c6181acf32876
ppc64le	evince-40.5-4.el9_8.1.ppc64le.rpm	650a89f42f903c42de8bd32285ea8cb5e6a5a0b7494e2c0193263b8255cf695d
ppc64le	evince-thumbnailer-40.5-4.el9_8.1.ppc64le.rpm	7da18ea49624a9008b108974a1826812a63e862aba9b4b4f48c1a90869a6c61b
ppc64le	evince-libs-40.5-4.el9_8.1.ppc64le.rpm	b5e9a27a3091de9414a8ee53acf4101fd7ff09e8cff5643ec8b5dd5f98ce5b23
ppc64le	evince-nautilus-40.5-4.el9_8.1.ppc64le.rpm	e4cc98a22a289d30a6d7b2d419cd0aed9ea9ea606ccbc56b6a8211ee9a74220e
s390x	evince-40.5-4.el9_8.1.s390x.rpm	429dd30b3e4cd27411eab7f921c8cae28bf91d666ac167e6cc7a2fa6081d5596
s390x	evince-thumbnailer-40.5-4.el9_8.1.s390x.rpm	6b18ce1b971215243efe06cbe0e2f8217dc33b5f4df8cd654ff221540a058788
s390x	evince-previewer-40.5-4.el9_8.1.s390x.rpm	7c99467117d991af1a63b9b1edc86c0bc126789d0c2f5eeeabb15a1c1d7ab963
s390x	evince-nautilus-40.5-4.el9_8.1.s390x.rpm	7da085c653dc6895d8df9145044c82a664e8ae3845e25534a1ca987fd0605dc9
s390x	evince-libs-40.5-4.el9_8.1.s390x.rpm	a2c7e556b6de950b4961b3a08e7decbf95d6e552f7abb90d18afa7ee89da920f
x86_64	evince-40.5-4.el9_8.1.x86_64.rpm	46ad86571bd2b367966da8bf5cad4a237068419be2a2e08bd7452fb3c8bbcf2c
x86_64	evince-libs-40.5-4.el9_8.1.x86_64.rpm	4796e333d4723935017baecf318131da0d6fe3593c14e9bbe8000611f4861fda
x86_64	evince-previewer-40.5-4.el9_8.1.x86_64.rpm	7b25fdc8a8b32a27baef337d010fd03983515a163d3efa6e775140fff38158ae
x86_64	evince-thumbnailer-40.5-4.el9_8.1.x86_64.rpm	a9da384324e42c4416aa88a0d1c09c660f7f92952bc3f0c93f247d0fb48af1da
x86_64	evince-nautilus-40.5-4.el9_8.1.x86_64.rpm	f4510ebc343c853833fc8dc4084e421b088b5320baef23fa7cd200d16fc517f5

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.