High ELSA-2023-1930 1 CVE

Important: emacs security update (Oracle Linux 8)

Published Apr 24, 2023 · Updated Apr 24, 2023

Ecosystem: Oracle Linux

Summary

[1:26.1-7.1]
- Fix ob-latex.el command injection vulnerability (#2180585)

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 8	emacs	1:26.1-7.el8_7.1
Oracle Linux · 8	emacs-common	1:26.1-7.el8_7.1
Oracle Linux · 8	emacs-filesystem	1:26.1-7.el8_7.1
Oracle Linux · 8	emacs-lucid	1:26.1-7.el8_7.1
Oracle Linux · 8	emacs-nox	1:26.1-7.el8_7.1
Oracle Linux · 8	emacs-terminal	1:26.1-7.el8_7.1

Vulnerabilities 1

High 7.8

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary co…

xemacs21-packages xemacs21 emacs25 emacs24 Debian Ubuntu Azure Linux

Mar 19, 2023