Lucene search

K
redhatRedHatRHSA-2023:7083
HistoryNov 14, 2023 - 8:44 a.m.

(RHSA-2023:7083) Moderate: emacs security update

2023-11-1408:44:40
access.redhat.com
23
gnu emacs
security update
command execution
command injection
cve-2022-48337
cve-2022-48339
red hat enterprise linux 8.9
release notes

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.0%

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: command execution via shell metacharacters (CVE-2022-48337)

  • emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.