Most recent entries from all

ALSA-2023:2626 — Important: emacs security update

Affected: AlmaLinux:9: emacs, AlmaLinux:9: emacs-common, AlmaLinux:9: emacs-filesystem, AlmaLinux:9: emacs-lucid, AlmaLinux:9: emacs-nox

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux (CVE-2023-2491) * emacs: command execution via shell metacharacters (CVE-2022-48337) * emacs: local command injection in ruby-mode.el (CVE-2022-48338) * emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-05925

EUVD-2026-211396

fkie_cve-2023-2491

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

GHSA-2hj6-9wp7-hvmh

gsd-2023-2491

RHSA-2023:2626 — Red Hat Security Advisory: emacs security update

emacs: command execution via shell metacharacters emacs: local command injection in ruby-mode.el emacs: command injection vulnerability in htmlfontify.el emacs: Regression of CVE-2023-28617 fixes in the Red Hat Enterprise Linux

WID-SEC-W-2023-1542 — Red Hat OpenShift: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.