Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-96442: A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | emacs | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-common | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-debuginfo | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-devel | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-filesystem | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-lucid | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-nox | 1:27.2-4.amzn2.0.9 |
| Amazon Linux · 2 | emacs-terminal | 1:27.2-4.amzn2.0.9 |
Vulnerabilities 1
-
High 7.8
Emacs: emacs: arbitrary code execution in flymake mode
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using E…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-96442.html