Summary
[1:26.1-15.2]
- Fix TRAMP user name shell injection vulnerability (CVE-2026-79992)
- Resolves: RHEL-248545
[1:26.1-15.1]
- Fix integer overflow in PBM image loader (CVE-2026-77219)
- Resolves: RHEL-248064
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | emacs | 1:26.1-15.el8_10.2 |
| Oracle Linux · 8 | emacs-common | 1:26.1-15.el8_10.2 |
| Oracle Linux · 8 | emacs-filesystem | 1:26.1-15.el8_10.2 |
| Oracle Linux · 8 | emacs-lucid | 1:26.1-15.el8_10.2 |
| Oracle Linux · 8 | emacs-nox | 1:26.1-15.el8_10.2 |
| Oracle Linux · 8 | emacs-terminal | 1:26.1-15.el8_10.2 |
Vulnerabilities 2
-
High 7.8
Emacs: emacs: command injection via crafted filenames in tramp
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Success…
-
High 7.1
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image di…