Red Hat Security AdvisoryRHSA-2017:2771
emacs security update
Released 2017-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) emacs-1:24.3-20.el7_4, emacs-common-1:24.3-20.el7_4, emacs-filesystem-1:24.3-20.el7_4 +1
- Red Hat Enterprise Linux Client Optional (v. 7) emacs-el-1:24.3-20.el7_4, emacs-terminal-1:24.3-20.el7_4
- Red Hat Enterprise Linux ComputeNode (v. 7) emacs-1:24.3-20.el7_4, emacs-filesystem-1:24.3-20.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-1:24.3-20.el7_4, emacs-common-1:24.3-20.el7_4, emacs-el-1:24.3-20.el7_4 +2
- Red Hat Enterprise Linux Server (v. 7) emacs-1:24.3-20.el7_4, emacs-common-1:24.3-20.el7_4, emacs-filesystem-1:24.3-20.el7_4 +1
- Red Hat Enterprise Linux Server Optional (v. 7) emacs-el-1:24.3-20.el7_4, emacs-terminal-1:24.3-20.el7_4
- Red Hat Enterprise Linux Workstation (v. 7) emacs-1:24.3-20.el7_4, emacs-common-1:24.3-20.el7_4, emacs-filesystem-1:24.3-20.el7_4 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-el-1:24.3-20.el7_4, emacs-terminal-1:24.3-20.el7_4
Fixes 1 record
Priority MEDIUM 45
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.04009 · Published 2017-09-14 · Partial fix
