Summary
[1:27.2-11.1]
- Eliminate use of obsolete patch syntax (RHEL-80443)
[1:27.2-11]
- Fix man.el shell injection vulnerability (RHEL-79025)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | emacs | 1:27.2-11.el9_5.1 |
| Oracle Linux · 9 | emacs-common | 1:27.2-11.el9_5.1 |
| Oracle Linux · 9 | emacs-filesystem | 1:27.2-11.el9_5.1 |
| Oracle Linux · 9 | emacs-lucid | 1:27.2-11.el9_5.1 |
| Oracle Linux · 9 | emacs-nox | 1:27.2-11.el9_5.1 |
Vulnerabilities 1
-
High 8.8
Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or …