Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 48 articles for you...
217
security advisorypatchimportantOracle Linux 9 evince Important Sanitization Issue ELSA-2026-27819
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-27819 http://linux.oracle.com/errata/ELSA-2026-27819.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: evince-40.5-4.el9_8.1.x86_64.rpm evince-libs-40.5-4.el9_8.1.i686.rpm evince-libs-40.5-4.el9_8.1.x86_64.rpm evince-nautilus-40.5-4.el9_8.1.x86_64.rpm evince-previewer-40.5-4.el9_8.1.x86_64.rpm evince-thumbnailer-40.5-4.el9_8.1.x86_64.rpm aarch64: evince-40.5-4.el9_8.1.aarch64.rpm evince-libs-40.5-4.el9_8.1.aarch64.rpm evince-nautilus-40.5-4.el9_8.1.aarch64.rpm evince-previewer-40.5-4.el9_8.1.aarch64.rpm evince-thumbnailer-40.5-4.el9_8.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/evince-40.5-4.el9_8.1.src.rpm Related CVEs: CVE-2026-46529 Description of changes: [40.5-4.el9_8.1] - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 _______________________________________________ El-errata mailing list
Jun 26, 2026
•Important
Oracle
219
security advisoryimportantattackRocky Linux Evince Important RCE Vulnerability RLSA-2026-28998
Important: evince security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:28998", "synopsis": "Important: evince security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for evince.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.\n\nSecurity Fix(es):\n\n* atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2487669", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2487669", "description": ""}], "cves": [{"name": "CVE-2026-46529", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46529", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.8", "cwe": "CWE-77"}], "references": [], "publishedAt": "2026-06-25T06:00:31.266414Z", "rpms": {"Rocky Linux 8": {"nvras": ["evince-0:3.28.4-17.el8_10.aarch64.rpm", "evince-0:3.28.4-17.el8_10.src.rpm", "evince-0:3.28.4-17.el8_10.x86_64.rpm", "evince-browser-plugin-0:3.28.4-17.el8_10.aarch64.rpm", "evince-browser-plugin-0:3.28.4-17.el8_10.x86_64.rpm", "evince-browser-plugin-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm", "evince-browser-plugin-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm", "evince-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm", "evince-debuginfo-0:3.28.4-17.el8_10.i686.rpm","evince-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm", "evince-debugsource-0:3.28.4-17.el8_10.aarch64.rpm", "evince-debugsource-0:3.28.4-17.el8_10.i686.rpm", "evince-debugsource-0:3.28.4-17.el8_10.x86_64.rpm", "evince-devel-0:3.28.4-17.el8_10.aarch64.rpm", "evince-devel-0:3.28.4-17.el8_10.i686.rpm", "evince-devel-0:3.28.4-17.el8_10.x86_64.rpm", "evince-libs-0:3.28.4-17.el8_10.aarch64.rpm", "evince-libs-0:3.28.4-17.el8_10.i686.rpm", "evince-libs-0:3.28.4-17.el8_10.x86_64.rpm", "evince-libs-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm", "evince-libs-debuginfo-0:3.28.4-17.el8_10.i686.rpm", "evince-libs-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm", "evince-nautilus-0:3.28.4-17.el8_10.aarch64.rpm", "evince-nautilus-0:3.28.4-17.el8_10.x86_64.rpm", "evince-nautilus-debuginfo-0:3.28.4-17.el8_10.aarch64.rpm", "evince-nautilus-debuginfo-0:3.28.4-17.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Update for Evince addresses critical security issue impacting Rocky Linux systems, enhances document security against exploits.. Rocky Linux Evince Update Security Exploit RCE. . Severity: Important. LinuxSecurity.com Team
Jun 25, 2026
•Important
Rocky Linux
217
security advisorysoftware updateremote code executionOracle Linux ELSA-2026-28998 Evince Important Remote Code Execution Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-28998 http://linux.oracle.com/errata/ELSA-2026-28998.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: evince-3.28.4-17.el8_10.x86_64.rpm evince-browser-plugin-3.28.4-17.el8_10.x86_64.rpm evince-devel-3.28.4-17.el8_10.i686.rpm evince-devel-3.28.4-17.el8_10.x86_64.rpm evince-libs-3.28.4-17.el8_10.i686.rpm evince-libs-3.28.4-17.el8_10.x86_64.rpm evince-nautilus-3.28.4-17.el8_10.x86_64.rpm aarch64: evince-3.28.4-17.el8_10.aarch64.rpm evince-browser-plugin-3.28.4-17.el8_10.aarch64.rpm evince-devel-3.28.4-17.el8_10.aarch64.rpm evince-libs-3.28.4-17.el8_10.aarch64.rpm evince-nautilus-3.28.4-17.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/evince-3.28.4-17.el8_10.src.rpm Related CVEs: CVE-2026-46529 Description of changes: [3.28.4-17] - Fix CVE-2026-46529: quote string arguments passed to ev_spawn - Resolves: RHEL-184039 _______________________________________________ El-errata mailing list
Jun 25, 2026
•Important
Oracle
203
security advisorycriticalcommand injectionMageia 9 Evince Critical Command Injection CVE-2026-46529
Security update. Publication date: 15 Jun 2026 URL: https://advisories.mageia.org/MGASA-2026-0209.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-46529 Description: Evince/Atril/Xreader command injection. (CVE-2026-46529) References: - https://bugs.mageia.org/show_bug.cgi?id=35553 - https://www.openwall.com/lists/oss-security/2026/05/19/34 - https://www.cve.org/CVERecord?id=CVE-2026-46529 SRPMS: - 9/core/evince-44.2-1.1.mga9 - 9/core/atril-1.26.1-1.2.mga9 - 9/core/xreader-3.6.0-2.1.mga9 . Mageia advisory for Evince command injection flaw CVE-2026-46529 with critical update guidance for safety.. Mageia Security, Evince Exploit, Command Injection, CVE-2026-46529, Software Update. . Severity: Critical. LinuxSecurity.com Team
Jun 15, 2026
•Critical
Mageia
100
security advisorySuSEimportantSUSE Evince Significant Command Injection Threat Notice 2026-2288-1
An update that solves one vulnerability can now be installed.. # Security update for evince Announcement ID: SUSE-SU-2026:2288-1 Release Date: 2026-06-05T14:04:04Z Rating: important References: * bsc#1265880 Cross-References: * CVE-2026-46529 CVSS scores: * CVE-2026-46529 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46529 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for evince fixes the following issue * CVE-2026-46529: Evince/Atril/Xreader command injection (bsc#1265880). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2288=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2288=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * evince-plugin-dvidocument-3.20.2-6.30.1 * evince-plugin-tiffdocument-3.20.2-6.30.1 * libevview3-3-3.20.2-6.30.1 * evince-plugin-psdocument-3.20.2-6.30.1 * libevdocument3-4-debuginfo-3.20.2-6.30.1 * evince-devel-3.20.2-6.30.1 * evince-debugsource-3.20.2-6.30.1 * libevdocument3-4-3.20.2-6.30.1 * evince-plugin-xpsdocument-3.20.2-6.30.1 * evince-plugin-xpsdocument-debuginfo-3.20.2-6.30.1 * evince-plugin-psdocument-debuginfo-3.20.2-6.30.1 * nautilus-evince-3.20.2-6.30.1 * evince-plugin-djvudocument-3.20.2-6.30.1 * evince-plugin-tiffdocument-debuginfo-3.20.2-6.30.1 * evince-browser-plugin-debuginfo-3.20.2-6.30.1 * evince-3.20.2-6.30.1 * evince-plugin-dvidocument-debuginfo-3.20.2-6.30.1 * evince-debuginfo-3.20.2-6.30.1 * nautilus-evince-debuginfo-3.20.2-6.30.1 * evince-browser-plugin-3.20.2-6.30.1 * evince-plugin-pdfdocument-3.20.2-6.30.1 * libevview3-3-debuginfo-3.20.2-6.30.1 * evince-plugin-djvudocument-debuginfo-3.20.2-6.30.1 * evince-plugin-pdfdocument-debuginfo-3.20.2-6.30.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * evince-lang-3.20.2-6.30.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * evince-plugin-dvidocument-3.20.2-6.30.1 * evince-plugin-tiffdocument-3.20.2-6.30.1 * libevview3-3-3.20.2-6.30.1 * evince-plugin-psdocument-3.20.2-6.30.1 * libevdocument3-4-debuginfo-3.20.2-6.30.1 * evince-devel-3.20.2-6.30.1 * evince-debugsource-3.20.2-6.30.1 * libevdocument3-4-3.20.2-6.30.1 * evince-plugin-xpsdocument-3.20.2-6.30.1 * evince-plugin-xpsdocument-debuginfo-3.20.2-6.30.1 * evince-plugin-psdocument-debuginfo-3.20.2-6.30.1 * nautilus-evince-3.20.2-6.30.1 * evince-plugin-djvudocument-3.20.2-6.30.1 * evince-plugin-tiffdocument-debuginfo-3.20.2-6.30.1 * evince-browser-plugin-debuginfo-3.20.2-6.30.1 * evince-3.20.2-6.30.1 * evince-plugin-dvidocument-debuginfo-3.20.2-6.30.1 * evince-debuginfo-3.20.2-6.30.1 * nautilus-evince-debuginfo-3.20.2-6.30.1 * evince-browser-plugin-3.20.2-6.30.1 * evince-plugin-pdfdocument-3.20.2-6.30.1 * libevview3-3-debuginfo-3.20.2-6.30.1 * evince-plugin-djvudocument-debuginfo-3.20.2-6.30.1 * evince-plugin-pdfdocument-debuginfo-3.20.2-6.30.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * evince-lang-3.20.2-6.30.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46529.html * https://bugzilla.suse.com/show_bug.cgi?id=1265880 .Important security update for evince addresses command injection vulnerability and enhances system safety.. SUSE evince update command injection security patch. . Severity: Important. LinuxSecurity.com Team
Jun 05, 2026
•Important
SuSE
202
security advisoryupdateimportantopenSUSE Evince Command Injection Alert SUSE-SU-2026-2232-1
An update that solves one vulnerability can now be installed.. # Security update for evince Announcement ID: SUSE-SU-2026:2232-1 Release Date: 2026-06-03T10:58:32Z Rating: important References: * bsc#1265880 Cross-References: * CVE-2026-46529 CVSS scores: * CVE-2026-46529 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46529 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for evince fixes the following issue * CVE-2026-46529: improper argument sanitization can lead to command injection (bsc#1265880). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2232=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2232=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2232=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patchSUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2232=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2232=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2232=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2232=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2232=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2232=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance ComputingLTSS 15 SP5 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * evince-lang-41.4-150400.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * evince-plugin-comicsdocument-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-plugin-comicsdocument-debuginfo-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * openSUSE Leap 15.4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 *evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-plugin-psdocument-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 *evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 *evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 *evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * evince-lang-41.4-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46529.html * https://bugzilla.suse.com/show_bug.cgi?id=1265880 . Critical security patch for openSUSE evince fixes command injection issue CVE-2026-46529 with important rating.. openSUSE Command Injection Evince Kernel Update Importance. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2026
•Important
OpenSUSE
100
security advisoryimportantcommand injectionSUSE OpenSUSE Evince Important Command Injection Advisory 2026-2232-1
An update that solves one vulnerability can now be installed.. # Security update for evince Announcement ID: SUSE-SU-2026:2232-1 Release Date: 2026-06-03T10:58:32Z Rating: important References: * bsc#1265880 Cross-References: * CVE-2026-46529 CVSS scores: * CVE-2026-46529 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46529 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for evince fixes the following issue * CVE-2026-46529: improper argument sanitization can lead to command injection (bsc#1265880). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2232=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2232=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2232=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patchSUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2232=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2232=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2232=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2232=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2232=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2232=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance ComputingLTSS 15 SP5 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * evince-lang-41.4-150400.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * evince-plugin-comicsdocument-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-plugin-comicsdocument-debuginfo-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * openSUSE Leap 15.4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 *evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-plugin-psdocument-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 *evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 *evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 * evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * evince-lang-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * evince-plugin-psdocument-41.4-150400.3.6.1 * typelib-1_0-EvinceDocument-3_0-41.4-150400.3.6.1 * evince-devel-41.4-150400.3.6.1 * evince-plugin-dvidocument-41.4-150400.3.6.1 * libevview3-3-41.4-150400.3.6.1 * nautilus-evince-41.4-150400.3.6.1 * evince-debugsource-41.4-150400.3.6.1 * evince-plugin-djvudocument-41.4-150400.3.6.1 *evince-plugin-tiffdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-41.4-150400.3.6.1 * evince-plugin-xpsdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-tiffdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-dvidocument-debuginfo-41.4-150400.3.6.1 * libevview3-3-debuginfo-41.4-150400.3.6.1 * libevdocument3-4-41.4-150400.3.6.1 * evince-plugin-djvudocument-debuginfo-41.4-150400.3.6.1 * evince-41.4-150400.3.6.1 * libevdocument3-4-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-41.4-150400.3.6.1 * nautilus-evince-debuginfo-41.4-150400.3.6.1 * typelib-1_0-EvinceView-3_0-41.4-150400.3.6.1 * evince-debuginfo-41.4-150400.3.6.1 * evince-plugin-pdfdocument-debuginfo-41.4-150400.3.6.1 * evince-plugin-psdocument-debuginfo-41.4-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * evince-lang-41.4-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46529.html * https://bugzilla.suse.com/show_bug.cgi?id=1265880 . Critical security update for evince to fix command injection vulnerability in openSUSE and SUSE Linux Enterprise Server.. evince security patch, SUSE command injection, openSUSE vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2026
•Important
SuSE
202
security advisorypatchimportantopenSUSE Evince Significant Command Injection Security Update 2026-2235-1
An update that solves one vulnerability can now be installed.. # Security update for evince Announcement ID: SUSE-SU-2026:2235-1 Release Date: 2026-06-03T11:00:13Z Rating: important References: * bsc#1265880 Cross-References: * CVE-2026-46529 CVSS scores: * CVE-2026-46529 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46529 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for evince fixes the following issue * CVE-2026-46529: improper argument sanitization can lead to command injection (bsc#1265880). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2235=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2235=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2235=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-2235=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * evince-plugin-psdocument-debuginfo-45.0-150600.3.3.1 * libevdocument3-4-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-45.0-150600.3.3.1 * evince-plugin-pdfdocument-45.0-150600.3.3.1 * evince-devel-45.0-150600.3.3.1 * evince-plugin-comicsdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-xpsdocument-debuginfo-45.0-150600.3.3.1 * evince-45.0-150600.3.3.1 * evince-plugin-comicsdocument-45.0-150600.3.3.1 * evince-plugin-pdfdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-tiffdocument-45.0-150600.3.3.1 * evince-plugin-psdocument-45.0-150600.3.3.1 * libevview3-3-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceView-3_0-45.0-150600.3.3.1 * evince-plugin-dvidocument-debuginfo-45.0-150600.3.3.1 * evince-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceDocument-3_0-45.0-150600.3.3.1 * evince-debugsource-45.0-150600.3.3.1 * libevview3-3-45.0-150600.3.3.1 * evince-plugin-tiffdocument-debuginfo-45.0-150600.3.3.1 * libevdocument3-4-45.0-150600.3.3.1 * evince-plugin-dvidocument-45.0-150600.3.3.1 * evince-plugin-xpsdocument-45.0-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * evince-lang-45.0-150600.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * evince-plugin-psdocument-debuginfo-45.0-150600.3.3.1 * libevdocument3-4-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-45.0-150600.3.3.1 * evince-plugin-pdfdocument-45.0-150600.3.3.1 * evince-devel-45.0-150600.3.3.1 * evince-plugin-xpsdocument-debuginfo-45.0-150600.3.3.1 * evince-45.0-150600.3.3.1 * evince-plugin-pdfdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-tiffdocument-45.0-150600.3.3.1 * evince-plugin-psdocument-45.0-150600.3.3.1 * libevview3-3-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceView-3_0-45.0-150600.3.3.1 * evince-plugin-dvidocument-debuginfo-45.0-150600.3.3.1 * evince-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceDocument-3_0-45.0-150600.3.3.1 * evince-debugsource-45.0-150600.3.3.1 * libevview3-3-45.0-150600.3.3.1 *evince-plugin-tiffdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-dvidocument-45.0-150600.3.3.1 * libevdocument3-4-45.0-150600.3.3.1 * evince-plugin-xpsdocument-45.0-150600.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * evince-lang-45.0-150600.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * evince-plugin-psdocument-debuginfo-45.0-150600.3.3.1 * libevdocument3-4-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-45.0-150600.3.3.1 * evince-plugin-pdfdocument-45.0-150600.3.3.1 * evince-devel-45.0-150600.3.3.1 * evince-plugin-xpsdocument-debuginfo-45.0-150600.3.3.1 * evince-45.0-150600.3.3.1 * evince-plugin-pdfdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-tiffdocument-45.0-150600.3.3.1 * evince-plugin-psdocument-45.0-150600.3.3.1 * libevview3-3-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceView-3_0-45.0-150600.3.3.1 * evince-plugin-dvidocument-debuginfo-45.0-150600.3.3.1 * evince-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceDocument-3_0-45.0-150600.3.3.1 * evince-debugsource-45.0-150600.3.3.1 * libevview3-3-45.0-150600.3.3.1 * evince-plugin-tiffdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-dvidocument-45.0-150600.3.3.1 * libevdocument3-4-45.0-150600.3.3.1 * evince-plugin-xpsdocument-45.0-150600.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * evince-lang-45.0-150600.3.3.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * evince-plugin-psdocument-debuginfo-45.0-150600.3.3.1 * libevdocument3-4-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-45.0-150600.3.3.1 * evince-plugin-pdfdocument-45.0-150600.3.3.1 * evince-devel-45.0-150600.3.3.1 * evince-plugin-xpsdocument-debuginfo-45.0-150600.3.3.1 * evince-45.0-150600.3.3.1 * evince-plugin-pdfdocument-debuginfo-45.0-150600.3.3.1 *evince-plugin-tiffdocument-45.0-150600.3.3.1 * evince-plugin-psdocument-45.0-150600.3.3.1 * libevview3-3-debuginfo-45.0-150600.3.3.1 * evince-plugin-djvudocument-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceView-3_0-45.0-150600.3.3.1 * evince-plugin-dvidocument-debuginfo-45.0-150600.3.3.1 * evince-debuginfo-45.0-150600.3.3.1 * typelib-1_0-EvinceDocument-3_0-45.0-150600.3.3.1 * evince-debugsource-45.0-150600.3.3.1 * libevview3-3-45.0-150600.3.3.1 * evince-plugin-tiffdocument-debuginfo-45.0-150600.3.3.1 * evince-plugin-dvidocument-45.0-150600.3.3.1 * libevdocument3-4-45.0-150600.3.3.1 * evince-plugin-xpsdocument-45.0-150600.3.3.1 * Desktop Applications Module 15-SP7 (noarch) * evince-lang-45.0-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46529.html * https://bugzilla.suse.com/show_bug.cgi?id=1265880 . Update fixes important command injection issue in evince for openSUSE and SLE. Immediate installation recommended.. openSUSE evince command injection security patch Linux update. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2026
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!