CVE-2023-2491
Fixed in a distro release EPSS <1%CVSS 7.8
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Products: gnu emacs, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | emacs | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-common | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-filesystem | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-lucid | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-nox | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-terminal | 1:26.1-10.el8_8.2 |
| AlmaLinux 9 | emacs | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-common | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-filesystem | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-lucid | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-nox | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 8 | emacs | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-common | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-common-debuginfo | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-debuginfo | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-debugsource | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-filesystem | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-lucid | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-lucid-debuginfo | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-nox | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-nox-debuginfo | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 8 | emacs-terminal | 1:26.1-10.el8_8.2 |
| Red Hat Enterprise Linux 9 | emacs | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-common | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-common-debuginfo | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-debuginfo | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-debugsource | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-filesystem | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-lucid | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-lucid-debuginfo | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-nox | 1:27.2-8.el9_2.1 |
| Red Hat Enterprise Linux 9 | emacs-nox-debuginfo | 1:27.2-8.el9_2.1 |