ALSA-2026:80506
ALSA-2026:80506 · Important: emacs security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
emacs AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-15.el8_10.2
Update to 1:26.1-15.el8_10.2
emacs-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-15.el8_10.2
Update to 1:26.1-15.el8_10.2
emacs-filesystem AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-15.el8_10.2
Update to 1:26.1-15.el8_10.2
emacs-lucid AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-15.el8_10.2
Update to 1:26.1-15.el8_10.2
emacs-nox AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-15.el8_10.2
Update to 1:26.1-15.el8_10.2
emacs-terminal AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-15.el8_10.2
Update to 1:26.1-15.el8_10.2
Original sources
- https://access.redhat.com/errata/RHSA-2026:80506
- https://access.redhat.com/security/cve/CVE-2026-77219
- https://access.redhat.com/security/cve/CVE-2026-79992
- https://bugzilla.redhat.com/2521196
- https://bugzilla.redhat.com/2523665
- https://errata.almalinux.org/8/ALSA-2026-80506.html
- https://osv.dev/vulnerability/ALSA-2026:80506