Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Emacs may run code or leak memory
published 1 month ago
Summary
The Emacs editor on SUSE systems can unintentionally execute code when a specially crafted file is opened, and it may also leak memory when handling certain image types. These issues could allow an attacker with access to the computer to run commands without your permission or cause the program to become unstable. Install the latest Emacs update from SUSE to close these gaps.
What to do
- Update suse emacs to version 24.3-25.26.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Server 12 SP5-LTSS | suse | emacs |
< 24.3-25.26.1 Fix: upgrade to 24.3-25.26.1
|
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | suse | emacs |
< 24.3-25.26.1 Fix: upgrade to 24.3-25.26.1
|
Original advisory text
Security update for emacs
This update for emacs fixes the following issues:
- code execution upon opening arbitrary file (bsc#1275941).
- CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader (bsc#1276264).
- CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927).
- code execution upon opening arbitrary file (bsc#1275941).
- CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader (bsc#1276264).
- CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20263993-1/ Vendor Advisory
- https://bugzilla.suse.com/1275927 Third Party Advisory
- https://bugzilla.suse.com/1275941 Third Party Advisory
- https://bugzilla.suse.com/1276264 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-77219 URL
- https://www.suse.com/security/cve/CVE-2026-79992 URL
Timeline
Published7 Sep 2026
Updated13 Sep 2026
First seen13 Sep 2026
Sources
SUSE-SU-2026:3993-1 · OSV
Track software like this
Free during beta