Skip to content
OpenAdvisories
High ELSA-2017-2771 1 CVE

Important: emacs security update (Oracle Linux 7)

Published Sep 19, 2017 · Updated Sep 19, 2017

Summary

[1:24.3-20]
- fix unsafe enriched mode translations (#1490452)

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 emacs 1:24.3-20.el7_4
Oracle Linux · 7 emacs-common 1:24.3-20.el7_4
Oracle Linux · 7 emacs-el 1:24.3-20.el7_4
Oracle Linux · 7 emacs-filesystem 1:24.3-20.el7_4
Oracle Linux · 7 emacs-nox 1:24.3-20.el7_4
Oracle Linux · 7 emacs-terminal 1:24.3-20.el7_4

Vulnerabilities 1

  • Unscored —

    GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enri…