Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Emacs Security Update for Linux Systems
published 1 year ago
Summary
A security update is available for Emacs, a popular text editor used on Linux systems. This update addresses a potential security risk that could allow an attacker to execute malicious code on a vulnerable system. To ensure the security of your system, apply the latest update as soon as possible.
What to do
- Update redhat emacs to version 1:27.2-14.el9_6.2.
- Update redhat emacs-common to version 1:27.2-14.el9_6.2.
- Update redhat emacs-common-debuginfo to version 1:27.2-14.el9_6.2.
- Update redhat emacs-debuginfo to version 1:27.2-14.el9_6.2.
- Update redhat emacs-debugsource to version 1:27.2-14.el9_6.2.
- Update redhat emacs-filesystem to version 1:27.2-14.el9_6.2.
- Update redhat emacs-lucid to version 1:27.2-14.el9_6.2.
- Update redhat emacs-lucid-debuginfo to version 1:27.2-14.el9_6.2.
- Update redhat emacs-nox to version 1:27.2-14.el9_6.2.
- Update redhat emacs-nox-debuginfo to version 1:27.2-14.el9_6.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-common |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-common-debuginfo |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-debuginfo |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-debugsource |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-filesystem |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-lucid |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-lucid-debuginfo |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-nox |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | emacs-nox-debuginfo |
< 1:27.2-14.el9_6.2 Fix: upgrade to 1:27.2-14.el9_6.2
|
Original advisory text
Red Hat Security Advisory: emacs security update
References
- https://access.redhat.com/errata/RHSA-2025:9448 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2329161 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9448.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-53920 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-53920 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-53920 Vendor Advisory
- https://eshelyaron.com/posts/2024-11-27-emacs-aritrary-code-execution-and-how-to... Third Party Advisory
- https://yhetil.org/emacs/CAFXAjY5f4YfHAtZur1RAqH34UbYU56_t6t2Er0YEh1Sb7-W=hg%40m... Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published25 Jun 2025
Updated4 Jul 2026
First seen4 Jul 2026
Sources
RHSA-2025:9448 · OSV
Track software like this
Free during beta