Red Hat Security AdvisoryRHSA-2024:1103
emacs security update
Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) emacs-1:26.1-7.el8_6.3, emacs-common-1:26.1-7.el8_6.3, emacs-lucid-1:26.1-7.el8_6.3 +2
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) emacs-1:26.1-7.el8_6.3, emacs-filesystem-1:26.1-7.el8_6.3
Fixes 3 records
Priority MEDIUM 52
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags progra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01617 · Published 2023-02-20 · Partial fix CWE-78
Priority LOW 38
An issue was discovered in GNU Emacs through 28.2.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01142 · Published 2023-02-20 · Partial fix CWE-1116
Priority LOW 37
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags progra…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00673 · Published 2022-11-28 · Partial fix CWE-78
