Most recent entries from all

ALSA-2023:1930 — Important: emacs security update

Affected: AlmaLinux:8: emacs, AlmaLinux:8: emacs-common, AlmaLinux:8: emacs-filesystem, AlmaLinux:8: emacs-lucid, AlmaLinux:8: emacs-nox, AlmaLinux:8: emacs-terminal

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: command injection vulnerability in org-mode (CVE-2023-28617)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-11741

EUVD-2026-258069

fkie_cve-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

GHSA-xwfh-qqww-gr22

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

gsd-2023-28617

msrc_CVE-2023-28617 — org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary co…

msrc_CVE-2023-28617

OESA-2023-1185 — emacs security update

Affected: openEuler:20.03-LTS-SP1: emacs, openEuler:20.03-LTS-SP3: emacs, openEuler:22.03-LTS: emacs, openEuler:22.03-LTS-SP1: emacs

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more. Security Fix(es): org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.(CVE-2023-28617)

RHSA-2023:1915 — Red Hat Security Advisory: emacs security update

emacs: command injection vulnerability in org-mode

RHSA-2023:1930 — Red Hat Security Advisory: emacs security update

emacs: command injection vulnerability in org-mode

UBUNTU-CVE-2023-28617

Affected: Ubuntu:16.04:LTS: xemacs21, Ubuntu:16.04:LTS: xemacs21-packages, Ubuntu:Pro:16.04:LTS: emacs24, Ubuntu:Pro:18.04:LTS: emacs25, Ubuntu:18.04:LTS: xemacs21, Ubuntu:18.04:LTS: xemacs21-packages, Ubuntu:Pro:20.04:LTS: emacs, Ubuntu:20.04:LTS: xemacs21, Ubuntu:20.04:LTS: xemacs21-packages, Ubuntu:22.04:LTS: emacs and 9 more

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

WID-SEC-W-2023-0692 — GNU Emacs: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in GNU Emacs ausnutzen, um beliebigen Programmcode auszuführen.