File _patchinfo of Package patchinfo.27896

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.27896

<patchinfo incident="27896">
  <issue tracker="cve" id="2022-48339"/>
  <issue tracker="cve" id="2022-48338"/>
  <issue tracker="cve" id="2022-48337"/>
  <issue tracker="bnc" id="1208515">VUL-0: CVE-2022-48337: emacs: command execution via shell metacharacters</issue>
  <issue tracker="bnc" id="1208512">VUL-0: CVE-2022-48339: emacs: command injection vulnerability in htmlfontify.el</issue>
  <issue tracker="bnc" id="1208514">VUL-0: CVE-2022-48338: emacs: local command injection in ruby-mode.el</issue>
  <packager>WernerFink</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for emacs</summary>
  <description>This update for emacs fixes the following issues:

- CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515).
  - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512).
  - CVE-2022-48338: Fixed ruby-mode.el local command injection vulnerability (bsc#1208514).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.27896

Places