CVE-2026-46529 is an argument injection vulnerability in Evince, Atril, and Xreader caused by missing shell quoting when composing a command line. The reporter, João Medeiros, has published a GitHub repo for the CVE and a blog post with the story of how he discovered the flaw and developed the exploit. He also created an Atril...
  • inari@piefed.zipEnglish
    2·
    2 months ago

    I’m hoping that was the fix in the evince update I did this morning