Red Hat Security AdvisoryRHSA-2023:1915
emacs security update
Released 2023-04-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) emacs-1:26.1-5.el8_2.1, emacs-common-1:26.1-5.el8_2.1, emacs-lucid-1:26.1-5.el8_2.1 +2
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) emacs-1:26.1-5.el8_2.1, emacs-common-1:26.1-5.el8_2.1, emacs-lucid-1:26.1-5.el8_2.1 +2
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) emacs-1:26.1-5.el8_2.1, emacs-common-1:26.1-5.el8_2.1, emacs-lucid-1:26.1-5.el8_2.1 +2
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) emacs-1:26.1-5.el8_2.1, emacs-filesystem-1:26.1-5.el8_2.1
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) emacs-1:26.1-5.el8_2.1, emacs-filesystem-1:26.1-5.el8_2.1
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) emacs-1:26.1-5.el8_2.1, emacs-filesystem-1:26.1-5.el8_2.1
Fixes 1 record
Priority LOW 36
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00469 · Published 2023-03-19 · Fixed CWE-78
