ELSA-2023-1930

Опубликовано: 24 апр. 2023

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2023-1930: emacs security update (IMPORTANT)

[1:26.1-7.1]

Fix ob-latex.el command injection vulnerability (#2180585)

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

emacs

26.1-7.el8_7.1

emacs-common

26.1-7.el8_7.1

emacs-filesystem

26.1-7.el8_7.1

emacs-lucid

26.1-7.el8_7.1

emacs-nox

26.1-7.el8_7.1

emacs-terminal

26.1-7.el8_7.1

Oracle Linux x86_64

emacs

26.1-7.el8_7.1

emacs-common

26.1-7.el8_7.1

emacs-filesystem

26.1-7.el8_7.1

emacs-lucid

26.1-7.el8_7.1

emacs-nox

26.1-7.el8_7.1

emacs-terminal

26.1-7.el8_7.1

Связанные CVE

CVE-2023-28617

Ссылки на источники

Связанные уязвимости

CVE-2023-28617

CVSS3: 7.8

ubuntu

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

redhat

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

nvd

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

msrc

больше 2 лет назад

Описание отсутствует

CVE-2023-28617

CVSS3: 7.8

debian

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for G ...