Red Hat Security AdvisoryRHSA-2023:2626
emacs security update
Released 2023-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) emacs-1:27.2-8.el9_2.1, emacs-common-1:27.2-8.el9_2.1, emacs-filesystem-1:27.2-8.el9_2.1 +2
Fixes 4 records
Priority MEDIUM 52
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags progra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01617 · Published 2023-02-20 · Partial fix CWE-78
Priority LOW 38
An issue was discovered in GNU Emacs through 28.2.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01142 · Published 2023-02-20 · Partial fix CWE-1116
Priority LOW 37
An issue was discovered in GNU Emacs through 28.2.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.01639 · Published 2023-02-20 · Partial fix CWE-77
Priority LOW 36
A flaw was found in the Emacs text editor.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00461 · Published 2023-05-17 · Fixed CWE-77
