Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4083-1

Опубликовано: 08 сент. 2026
Источник: suse-cvrf

Описание

Security update for emacs

This update for emacs fixes the following issues:

  • Arbitrary code execution when opening a specially crafted file (bsc#1275941).
  • CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color index is processed (bsc#1276264).
  • CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted filenames (bsc#1275927).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Module for Basesystem 15 SP7
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
emacs-x11-27.2-150400.3.31.2
SUSE Linux Enterprise Server 15 SP4-LTSS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Server 15 SP5-LTSS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Server 15 SP6-LTSS
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Server for SAP Applications 15 SP4
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Server for SAP Applications 15 SP5
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2
SUSE Linux Enterprise Server for SAP Applications 15 SP6
emacs-27.2-150400.3.31.2
emacs-el-27.2-150400.3.31.2
emacs-info-27.2-150400.3.31.2
emacs-nox-27.2-150400.3.31.2
emacs-x11-27.2-150400.3.31.2
etags-27.2-150400.3.31.2

Ссылки

Описание

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-read contents are interpreted as pixel color values and rendered on screen.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-el-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-info-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-nox-27.2-150400.3.31.2
Ссылки

Описание

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-el-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-info-27.2-150400.3.31.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:emacs-nox-27.2-150400.3.31.2
Ссылки
Уязвимость SUSE-SU-2026:4083-1