Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-2130

Опубликовано: 21 мар. 2025
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2025-2130: emacs security update (IMPORTANT)

[1:24.3-23.0.1.1]

  • Fix CVE-2025-1244 man.el shell injection vulnerability [Orabug: 37658579]

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

emacs

24.3-23.0.1.el7_9.1

emacs-common

24.3-23.0.1.el7_9.1

emacs-el

24.3-23.0.1.el7_9.1

emacs-filesystem

24.3-23.0.1.el7_9.1

emacs-nox

24.3-23.0.1.el7_9.1

emacs-terminal

24.3-23.0.1.el7_9.1

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
redhat
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
nvd
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS3: 8.8
msrc
4 месяца назад

Описание отсутствует

CVSS3: 8.8
debian
4 месяца назад

A command injection flaw was found in the text editor Emacs. It could ...