Summary
[1:26.1-15.4]
- Add missing untrusted-content variable definition (fixes CVE-2026-96442)
- Related: RHEL-265099
[1:26.1-15.3]
- Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442)
- Resolves: RHEL-265099
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | emacs | 1:26.1-15.el8_10.4 |
| Oracle Linux · 8 | emacs-common | 1:26.1-15.el8_10.4 |
| Oracle Linux · 8 | emacs-filesystem | 1:26.1-15.el8_10.4 |
| Oracle Linux · 8 | emacs-lucid | 1:26.1-15.el8_10.4 |
| Oracle Linux · 8 | emacs-nox | 1:26.1-15.el8_10.4 |
| Oracle Linux · 8 | emacs-terminal | 1:26.1-15.el8_10.4 |
Vulnerabilities 1
-
High 7.8
Emacs: emacs: arbitrary code execution in flymake mode
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using E…