Summary
[1:29.4-17]
- Fix arbitrary code execution upon opening file (CVE-2026-96269)
[1:29.4-16]
- Generalize trusted-content-p check to all Flymake backends
(CVE-2026-96442)
[1:29.4-15]
- tramp: restrict user name to prevent shell injection (CVE-2026-79992)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | emacs | 1:29.4-14.el10_2.4 |
| Oracle Linux · 10 | emacs-common | 1:29.4-14.el10_2.4 |
| Oracle Linux · 10 | emacs-filesystem | 1:29.4-14.el10_2.4 |
| Oracle Linux · 10 | emacs-lucid | 1:29.4-14.el10_2.4 |
| Oracle Linux · 10 | emacs-nw | 1:29.4-14.el10_2.4 |
Vulnerabilities 1
-
High 7.5
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-sym…