Summary
[1:27.2-8.1]
- Fix etags local command injection vulnerability (#2184369)
- Fix htmlfontify.el command injection vulnerability (#2184368)
- Fix ruby-mode.el local command injection vulnerability (#2184367)
- Fix ob-latex.el command injection vulnerability (#2184377)
[1:27.2-8]
- Use a 64KB page size for pdump (#1979804)
[1:27.2-7]
- Fix ctags local command execute vulnerability (#2149387)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | emacs | 1:27.2-8.el9_2.1 |
| Oracle Linux · 9 | emacs-common | 1:27.2-8.el9_2.1 |
| Oracle Linux · 9 | emacs-filesystem | 1:27.2-8.el9_2.1 |
| Oracle Linux · 9 | emacs-lucid | 1:27.2-8.el9_2.1 |
| Oracle Linux · 9 | emacs-nox | 1:27.2-8.el9_2.1 |
Vulnerabilities 4
-
Critical 9.8
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file,…
-
High 7.8
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-ist…
-
High 7.8
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:lat…
-
High 7.3
An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local com…