Summary
[1:29.4-16]
- Generalize trusted-content-p check to all Flymake backends
(CVE-2026-96442)
[1:29.4-15]
- tramp: restrict user name to prevent shell injection (CVE-2026-79992)
[1:29.4-14]
- image: fix integer overflow in pbm_load (CVE-2026-77219)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | emacs | 1:29.4-14.el10_2.3 |
| Oracle Linux · 10 | emacs-common | 1:29.4-14.el10_2.3 |
| Oracle Linux · 10 | emacs-filesystem | 1:29.4-14.el10_2.3 |
| Oracle Linux · 10 | emacs-lucid | 1:29.4-14.el10_2.3 |
| Oracle Linux · 10 | emacs-nw | 1:29.4-14.el10_2.3 |
Vulnerabilities 3
-
High 7.8
Emacs: emacs: command injection via crafted filenames in tramp
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Success…
-
High 7.8
Emacs: emacs: arbitrary code execution in flymake mode
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using E…
-
High 7.1
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image di…