Skip to content
OpenAdvisories
High ALSA-2023:2626 5 CVEs

Important: emacs security update

Published May 9, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux (CVE-2023-2491)
* emacs: command execution via shell metacharacters (CVE-2022-48337)
* emacs: local command injection in ruby-mode.el (CVE-2022-48338)
* emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 9 emacs 1:27.2-8.el9_2.1
AlmaLinux · 9 emacs-common 1:27.2-8.el9_2.1
AlmaLinux · 9 emacs-filesystem 1:27.2-8.el9_2.1
AlmaLinux · 9 emacs-lucid 1:27.2-8.el9_2.1
AlmaLinux · 9 emacs-nox 1:27.2-8.el9_2.1

Vulnerabilities 5

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-48337
  • report
    https://access.redhat.com/security/cve/CVE-2022-48338
  • report
    https://access.redhat.com/security/cve/CVE-2022-48339
  • report
    https://access.redhat.com/security/cve/CVE-2023-2491
  • report
    https://bugzilla.redhat.com/2171987
  • report
    https://bugzilla.redhat.com/2171988
  • report
    https://bugzilla.redhat.com/2171989
  • report
    https://bugzilla.redhat.com/2192873
  • advisory
    https://errata.almalinux.org/9/ALSA-2023-2626.html