This update for emacs fixes the following issues:
- CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927).
- CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection
(bsc#1284345, bsc#1284990).
This update for emacs fixes the following issue:
- CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp
mode due to incomplete fix for CVE (bsc#1282390).
This update for emacs fixes the following issues:
- Arbitrary code execution when opening a specially crafted file (bsc#1275941).
- CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted
image with large dimensions and an elevated max color index is processed (bsc#1276264).
- CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted filenames
(bsc#1275927).