Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-1915

Опубликовано: 28 фев. 2025
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2025-1915: emacs security update (IMPORTANT)

[1:27.2-11.1]

  • Eliminate use of obsolete patch syntax (RHEL-80443)

[1:27.2-11]

  • Fix man.el shell injection vulnerability (RHEL-79025)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

emacs

27.2-11.el9_5.1

emacs-common

27.2-11.el9_5.1

emacs-filesystem

27.2-11.el9_5.1

emacs-lucid

27.2-11.el9_5.1

emacs-nox

27.2-11.el9_5.1

Oracle Linux x86_64

emacs

27.2-11.el9_5.1

emacs-common

27.2-11.el9_5.1

emacs-filesystem

27.2-11.el9_5.1

emacs-lucid

27.2-11.el9_5.1

emacs-nox

27.2-11.el9_5.1

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
redhat
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
nvd
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
msrc
4 месяца назад

Описание отсутствует

CVSS3: 8.8
debian
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could ...