Red Hat Security Advisory

RHSA-2026:80507

emacs security update

Released 2026-10-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) emacs-1:27.2-18.el9_8.2, emacs-common-1:27.2-18.el9_8.2, emacs-filesystem-1:27.2-18.el9_8.2 +2

Fixes 2 records

TI-2026-55326 CVE-2026-79992 · GHSA-42vv-cfp2-9qc8

Emacs: emacs: command injection via crafted filenames in tramp

LOW 35

A flaw was found in Emacs TRAMP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2026-08-25 Partial fix · 1:29.4-14.el10_2.3, 1:26.1-15.el8_10.2 +1 CWE-78

TI-2026-53918 CVE-2026-77219 · GHSA-q8pr-2495-3jw7

GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

LOW 29

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color inde…

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00128 Published 2026-08-21 Partial fix · 31.0.91 CWE-125