Red Hat Security AdvisoryRHSA-2023:7083
emacs security update
Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) emacs-1:26.1-11.el8, emacs-common-1:26.1-11.el8, emacs-lucid-1:26.1-11.el8 +2
- Red Hat Enterprise Linux BaseOS (v. 8) emacs-1:26.1-11.el8, emacs-filesystem-1:26.1-11.el8
Fixes 2 records
Priority MEDIUM 52
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags progra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01617 · Published 2023-02-20 · Partial fix CWE-78
Priority LOW 38
An issue was discovered in GNU Emacs through 28.2.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01142 · Published 2023-02-20 · Partial fix CWE-1116
