USN-5781-1: Emacs vulnerability

Publication date

14 December 2022

Overview

Emacs could be made to run programs as your login if it received specially crafted input.

Releases

16.04 LTS

Packages

It was discovered that Emacs did not properly manage certain inputs.
An attacker could possibly use this issue to execute arbitrary commands.

In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
16.04 xenial	emacs24-bin-common – 24.5+1-6ubuntu1.1+esm1
16.04 xenial	emacs24 – 24.5+1-6ubuntu1.1+esm1

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro