Most recent entries from all

ALSA-2023:2366 — Moderate: emacs security and bug fix update

Affected: AlmaLinux:9: emacs, AlmaLinux:9: emacs-common, AlmaLinux:9: emacs-filesystem, AlmaLinux:9: emacs-lucid, AlmaLinux:9: emacs-nox

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: ctags local command execution vulnerability (CVE-2022-45939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-05926

CLEANSTART-2024-MU53780 — GNU Emacs through 28

Affected: CleanStart: emacs

Security vulnerability affects the emacs package. GNU Emacs through 28.

cnvd-2022-85329

EUVD-2026-235472

fkie_cve-2022-45939

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.

GHSA-m57w-hf24-4j3h

gsd-2022-45939

msrc_CVE-2022-45939 — GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file…

msrc_CVE-2022-45939

OESA-2022-2131 — emacs security update

Affected: openEuler:20.03-LTS-SP1: emacs, openEuler:20.03-LTS-SP3: emacs, openEuler:22.03-LTS: emacs

Emacs is the extensible, customizable, self-documenting real-time display editor.At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more. Security Fix(es): GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.(CVE-2022-45939)

openSUSE-SU-2024:12541-1 — emacs-28.2-1.1 on GA media

emacs-28.2-1.1 on GA media

RHSA-2024:1103 — Red Hat Security Advisory: emacs security update

emacs: ctags local command execution vulnerability emacs: command execution via shell metacharacters emacs: command injection vulnerability in htmlfontify.el

SUSE-SU-2022:4305-1 — Security update for emacs

Security update for emacs

UBUNTU-CVE-2022-45939

Affected: Ubuntu:16.04:LTS: xemacs21, Ubuntu:16.04:LTS: xemacs21-packages, Ubuntu:Pro:16.04:LTS: emacs24, Ubuntu:Pro:18.04:LTS: emacs25, Ubuntu:18.04:LTS: xemacs21, Ubuntu:18.04:LTS: xemacs21-packages, Ubuntu:Pro:20.04:LTS: emacs, Ubuntu:20.04:LTS: xemacs21, Ubuntu:20.04:LTS: xemacs21-packages, Ubuntu:22.04:LTS: emacs and 8 more

WID-SEC-W-2022-2181 — GNU Emacs: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GNU Emacs ausnutzen, um beliebigen Programmcode auszuführen.