emacs-27.2-6.el9.1

エラータID: AXSA:2023-5326:02

Release date: 
Monday, May 8, 2023 - 02:12
Subject: 
emacs-27.2-6.el9.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: command injection vulnerability in org-mode (CVE-2023-28617)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-28617
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. emacs-27.2-6.el9.1.src.rpm
    MD5: 3be91aa3fa3c459ffe1f5e60851b29b6
    SHA-256: 5fd023d7d2302ef25b67fcd28fcc5ebf98f3e1d5962ccf42f87a5b4b20dfeff0
    Size: 42.61 MB

Asianux Server 9 for x86_64
  1. emacs-27.2-6.el9.1.x86_64.rpm
    MD5: cca91d7d60a039477b80a1cd20c5908b
    SHA-256: 619766470c42e82b9f0d98432df365a2bc2a40543076beaedf861ed2fb8fee1f
    Size: 3.28 MB
  2. emacs-common-27.2-6.el9.1.x86_64.rpm
    MD5: e56410fbb53f082bac1fc7098d4e8809
    SHA-256: 9a82f8e9ab3bde649adc34b3750ccd194e9b6d24d7940495f381711debdf254f
    Size: 35.31 MB
  3. emacs-filesystem-27.2-6.el9.1.noarch.rpm
    MD5: 55734d88cbe4eab8b3f4a581c573d65b
    SHA-256: c1af9e73c09a974caaff381dc3e9af8592381915f7c16a3f270ea000bbf59904
    Size: 7.51 kB
  4. emacs-lucid-27.2-6.el9.1.x86_64.rpm
    MD5: f05f06abe315bf693aa7d704ee9c5f85
    SHA-256: 7a457ee93238adc113fb858577999f7f3aba78a43a4b994eb9ed4fdfa7e8d959
    Size: 3.23 MB
  5. emacs-nox-27.2-6.el9.1.x86_64.rpm
    MD5: df8b9e5435aab135a365bbb333e58070
    SHA-256: 8a3e92e586dd0f5b1bcc92d3abfcdb6bbb3142b0e3cd3ff6cea911a121f4c93f
    Size: 2.82 MB