Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-common | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-common-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-debugsource | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-filesystem | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-gtk+x11-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-lucid | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-lucid-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-nw | 1:29.4-14.el10_2.3 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | emacs-nw-debuginfo | 1:29.4-14.el10_2.3 |
Vulnerabilities 3
-
High 7.8
Emacs: emacs: command injection via crafted filenames in tramp
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Success…
-
High 7.8
Emacs: emacs: arbitrary code execution in flymake mode
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using E…
-
High 7.1
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image di…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2521196
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2523665
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2537347
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84591.json
-
report
https://access.redhat.com/security/cve/CVE-2026-77219
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-77219
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-77219
-
article
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=81344
-
article
https://github.com/emacs-mirror/emacs/commit/b07e634e4cf45162ae0178e32092b040587f2c6c
-
article
https://github.com/emacs-mirror/emacs/releases/tag/emacs-31.0.91
-
article
https://www.vulncheck.com/advisories/gnu-emacs-heap-over-read-via-pbm-ppm-pgm-image-loader
-
report
https://access.redhat.com/security/cve/CVE-2026-79992
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-79992
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-79992
-
report
https://access.redhat.com/security/cve/CVE-2026-96442
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-96442
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-96442
-
article
https://github.com/emacs-mirror/emacs/commit/135e6f63f08fee3d374fa1a5187bce941a2d3e3c
-
article
https://github.com/emacs-mirror/emacs/commit/abc802ee2eb0b1663349ddf22a461f8e54a383fb
-
article
https://www.openwall.com/lists/oss-security/2026/09/14/1