Description
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | emacs | Affects emacs v26.1-9.el8 and emacs v27.2-8.el9, Fixed in emacs v26.1-10.el8_8.2 and emacs v27.2-8.el9_2.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | emacs +4 | 1:27.2-8.el9_2.1 | RHSA-2023:2626 |
| RHEL 8 | emacs +5 | 1:26.1-10.el8_8.2 | RHSA-2023:3104 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | emacs +4 | 1:27.2-8.el9_2.1 | ALSA-2023:2626 |
| AlmaLinux 8 | emacs +5 | 1:26.1-10.el8_8.2 | ALSA-2023:3104 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | emacs +4 | 1:27.2-8.el9_2.1 | ELSA-2023-2626 |
| Oracle Linux 8 | emacs +5 | 1:26.1-10.el8_8.2 | ELSA-2023-3104 |
Advisories 7
- ALSA-2023:2626 Important: emacs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:3104 Important: emacs security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:3104 Red Hat Security Advisory: emacs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2023:2626 Red Hat Security Advisory: emacs security update Red Hat Security Advisories (RHSA) · Jan 22, 2026
- WID-SEC-2023-1542 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- ELSA-2023-3104 Important: emacs security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 25, 2023
- ELSA-2023-2626 Important: emacs security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 17, 2023