Summary
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.
Security Fix(es):
* emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)
* emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)
* emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)
* emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 37
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | emacs | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-common-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debugsource | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debugsource | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debugsource | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-debugsource | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-filesystem | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-lucid-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw-debuginfo | 1:29.4-17.el10_3 |
| Rocky Linux · 10 | emacs-nw-debuginfo | 1:29.4-17.el10_3 |
Vulnerabilities 4
-
High 7.8
Emacs: emacs: command injection via crafted filenames in tramp
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Success…
-
High 7.8
Emacs: emacs: arbitrary code execution in flymake mode
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using E…
-
High 7.5
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-sym…
-
High 7.1
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image di…