सुरक्षा सलाह पर वापस जाएँ

Emacs Security Update — AlmaLinux 8 (ALSA-2026:90800)

ALSA-2026:90800 updates GNU Emacs on AlmaLinux 8, fixing CVE-2026-96442 — arbitrary code execution (CWE-94) in the editor, rated CVSS 7.8. Update with dnf update emacs on any system where emacs is installed or available to shell users.

High 7.8 CVSS
AlmaLinux 8

SharedLicense लाइसेंस के तहत इसका अर्थ

Code-execution flaws in Emacs are reached through files and packages a user opens — on multi-user servers, one crafted file can hand the attacker that user's full shell privileges.

Type:

security

Severity:

important

Release date:

2026-10-27

Description:

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 emacs-common-26.1-15.el8_10.4.aarch64.rpm 090ba54655713523f6f115e9677be64041c58f28bfed15de8824e33307c6f9ba
aarch64 emacs-nox-26.1-15.el8_10.4.aarch64.rpm 0d170cf1e535de07fe4252aee0def5618b3ab770d413325d1ad567015a79fe00
aarch64 emacs-26.1-15.el8_10.4.aarch64.rpm a0e7d628d42073602b20d7b430f902823ae767e33e3a80ef8b0c8d066704cb7e
aarch64 emacs-lucid-26.1-15.el8_10.4.aarch64.rpm c1a742195788f49cd0e8725520a940c162c3bfdf51b647777e3885d0e3c5e891
noarch emacs-terminal-26.1-15.el8_10.4.noarch.rpm 2d4d6cbadd9430e67d1a5b51e7f7668c431f9edd0e41437bc25a78f59349d7e8
noarch emacs-filesystem-26.1-15.el8_10.4.noarch.rpm f6fd27d59953056cfe0ec1c870591b15dcd0ad93784f0df088f849d1fb3bea88
ppc64le emacs-26.1-15.el8_10.4.ppc64le.rpm 1c3834c9c86f249070340c5817a2d08c4f1e8fa999cd77b198d8da11ebd4440a
ppc64le emacs-lucid-26.1-15.el8_10.4.ppc64le.rpm 62faa82fd3a267ab645e1085c6b87a64d4d250a188031dbe3ad07ecdaf789313
ppc64le emacs-nox-26.1-15.el8_10.4.ppc64le.rpm 74e2d5fc653849df1e85b392a27083764abf7ed46045cb9c58718338f5ff4af1
ppc64le emacs-common-26.1-15.el8_10.4.ppc64le.rpm bf2c8397da959be1d8fb5839cd9a826cfb1e84b5b60db5a9930cc382f7f47965
s390x emacs-common-26.1-15.el8_10.4.s390x.rpm 3b5596ce42f176fa11fb544c0a63b10d467093795032ac2341528b12d61c0a75
s390x emacs-26.1-15.el8_10.4.s390x.rpm 5955deb091de54667f44a4bf02029ad377272caf2ec4ca1fd6bd7eee6b35db6e
s390x emacs-nox-26.1-15.el8_10.4.s390x.rpm ab627cc0c216a6f853c364da27388caaebd565f65159c92665d50d93d460d92b
s390x emacs-lucid-26.1-15.el8_10.4.s390x.rpm ce65068fcbdf858d7ca50f81af8363a0e9a7b4793bfc23f3a9021c6c07905597
x86_64 emacs-common-26.1-15.el8_10.4.x86_64.rpm 45aaca196bc4108c4677b98b65937baa44307b9e33bd36334b6dba8279bab539
x86_64 emacs-26.1-15.el8_10.4.x86_64.rpm 6772fdcdea5baec0c9bb402c8a288a376e9e006f50d3c1cc65f1d718b1d5c970
x86_64 emacs-nox-26.1-15.el8_10.4.x86_64.rpm 8cdc976ddf6e9ffdc3fed879797784f621eb695a0ff4bf11910d38aa4b411fe3
x86_64 emacs-lucid-26.1-15.el8_10.4.x86_64.rpm b298f7d9cf5262be31e6a569424eed33e823290808b3ac6800d265935e70991a

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

अक्सर पूछे जाने वाले प्रश्न

What is CVE-2026-96442?
It is an arbitrary code execution vulnerability in GNU Emacs (CWE-94 — code injection class), rated CVSS 7.8 and fixed in the AlmaLinux 8 emacs update ALSA-2026:90800.
Who is affected?
AlmaLinux 8 systems with emacs installed — particularly multi-user servers where users can open files or install elisp packages, since both are execution paths for the flaw.
How do I apply the fix?
Run dnf update emacs; running Emacs sessions must be restarted to load the patched binary. Verify with emacs --version.
Is this the same Emacs flaw as the AlmaLinux 10 one?
No — AlmaLinux 10 received CVE-2026-96269 in ALSA-2026:90887, a separate flaw. Both errata ship in the same window and both should be applied on the respective versions.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें