RLSA-2026:84591
RLSA-2026:84591 · Important: emacs security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992) * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
emacs Rocky Linux:10
- Affected ranges
- ECOSYSTEM: < 1:29.4-14.el10_2.3
Update to 1:29.4-14.el10_2.3