ELSA-2023-2074

Опубликовано: 02 мая 2023

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2023-2074: emacs security update (IMPORTANT)

[1:27.2-6.1]

Fix ob-latex.el command injection vulnerability (#2180589)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

emacs

27.2-6.el9_1.1

emacs-common

27.2-6.el9_1.1

emacs-filesystem

27.2-6.el9_1.1

emacs-lucid

27.2-6.el9_1.1

emacs-nox

27.2-6.el9_1.1

Oracle Linux x86_64

emacs

27.2-6.el9_1.1

emacs-common

27.2-6.el9_1.1

emacs-filesystem

27.2-6.el9_1.1

emacs-lucid

27.2-6.el9_1.1

emacs-nox

27.2-6.el9_1.1

Связанные CVE

CVE-2023-28617

Ссылки на источники

Связанные уязвимости

CVE-2023-28617

CVSS3: 7.8

ubuntu

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

redhat

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

nvd

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

msrc

больше 2 лет назад

Описание отсутствует

CVE-2023-28617

CVSS3: 7.8

debian

больше 2 лет назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for G ...