Red Hat Security Advisory

RHSA-2026:84591

emacs security update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) emacs-1:29.4-14.el10_2.3, emacs-common-1:29.4-14.el10_2.3, emacs-lucid-1:29.4-14.el10_2.3 +1
Red Hat Enterprise Linux BaseOS (v. 10) emacs-1:29.4-14.el10_2.3, emacs-filesystem-1:29.4-14.el10_2.3

Fixes 3 records

TI-2026-63780 CVE-2026-96442 · GHSA-hmfx-447r-rwh3

Emacs: emacs: arbitrary code execution in flymake mode

LOW 35

A code execution flaw was found in Emacs, affecting versions prior to 31.2.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00201 Published 2026-09-23 Partial fix · 31.2, 1:29.4-14.el10_2.3 +2 CWE-94

TI-2026-55326 CVE-2026-79992 · GHSA-42vv-cfp2-9qc8

Emacs: emacs: command injection via crafted filenames in tramp

LOW 35

A flaw was found in Emacs TRAMP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2026-08-25 Partial fix · 1:29.4-14.el10_2.3, 1:26.1-15.el8_10.2 +1 CWE-78

TI-2026-53918 CVE-2026-77219 · GHSA-q8pr-2495-3jw7

GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

LOW 29

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color inde…

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00128 Published 2026-08-21 Partial fix · 31.0.91 CWE-125