Summary
[1:24.3-23.1]
- Fix htmlfontify.el command injection vulnerability (#2175177)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | emacs | 1:24.3-23.el7_9.1 |
| Oracle Linux · 7 | emacs-common | 1:24.3-23.el7_9.1 |
| Oracle Linux · 7 | emacs-el | 1:24.3-23.el7_9.1 |
| Oracle Linux · 7 | emacs-filesystem | 1:24.3-23.el7_9.1 |
| Oracle Linux · 7 | emacs-nox | 1:24.3-23.el7_9.1 |
| Oracle Linux · 7 | emacs-terminal | 1:24.3-23.el7_9.1 |
Vulnerabilities 1
-
High 7.8
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-ist…