Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 10 Buster DLA-3257-1 Moderate Emacs Command Execution Risk

debian lts
Calendar Grey December 31, 2022
Dist Debian Esm H88
To address command execution vulnerabilities in Emacs, follow measures from Debian LTS Advisory DLA-3257-1, ensuring updates, applying patches, and maintaining security protocols.
It was discovered that there was an issue in Emacs where where attackers could have executed arbitrary commands via shell metacharacters in the name of a source-code file
Topics%20covered

Topics Covered

security advisory moderate debian command execution emacs

Summary

This was because lib-src/etags.c used the system(3) library function
when calling the (external) ctags(1) binary.

For Debian 10 buster, this problem has been fixed in version
1:26.1+1-3.2+deb10u3.

We recommend that you upgrade your emacs packages.

For the detailed security status of emacs please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/emacs

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
important
Lowest
Low
Medium
High
Critical

Package: emacs
Version: 1:26.1+1-3.2+deb10u3
CVE ID: CVE-2022-45939
Debian Bug: 1025009

Topics%20covered

Topics Covered

security advisory moderate debian command execution emacs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here