PatchFirst · Свежие уязвимости
За последние 30 дней в emacs опубликовано уязвимостей: 2; в каталоге KEV: 0.
Уязвимостей: 5
This update for emacs fixes the following issues: - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927). - CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection (bsc#1284345, bsc#1284990).
This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE (bsc#1282390).
This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color index is processed (bsc#1276264). - CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted filenames (bsc#1275927).
This update for emacs fixes the following issues: - CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894).
This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. (bsc#1237091)
Сопоставьте установленный стек и версии со свежими базами уязвимостей.