Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-1917

Опубликовано: 27 фев. 2025
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2025-1917: emacs security update (IMPORTANT)

[1:26.1-13]

  • Fix man.el shell injection vulnerability (RHEL-79016)

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

emacs

26.1-13.el8_10

emacs-common

26.1-13.el8_10

emacs-filesystem

26.1-13.el8_10

emacs-lucid

26.1-13.el8_10

emacs-nox

26.1-13.el8_10

emacs-terminal

26.1-13.el8_10

Oracle Linux x86_64

emacs

26.1-13.el8_10

emacs-common

26.1-13.el8_10

emacs-filesystem

26.1-13.el8_10

emacs-lucid

26.1-13.el8_10

emacs-nox

26.1-13.el8_10

emacs-terminal

26.1-13.el8_10

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
redhat
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
nvd
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
msrc
4 месяца назад

Описание отсутствует

CVSS3: 8.8
debian
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could ...