Red Hat Product Errata RHSA-2024:4971 - Security Advisory
Issued:
2024-08-01
Updated:
2024-08-01

RHSA-2024:4971 - Security Advisory

Synopsis

Moderate: emacs security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for emacs is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x

Fixes

  • BZ - 2293942 - CVE-2024-39331 emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
x86_64
emacs-26.1-7.el8_6.5.x86_64.rpm SHA-256: bfeed61d58546b380cdff48b8a6462c8eb14731d971296a40efd4b8a95d5a0d0
emacs-common-26.1-7.el8_6.5.x86_64.rpm SHA-256: 1c12383897160349304cf11782803e083f39eb005258a583ce3de146f6a096c1
emacs-common-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: fae00a9a112931ed76ad682e0cc05ef795a61bfb4030b828948f8f5b67c7be5d
emacs-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: b9426483521075c6c76f408a03536bd58251d1d94f266acdf7228ce5d19f48fb
emacs-debugsource-26.1-7.el8_6.5.x86_64.rpm SHA-256: d64872b6e495401a1a7bd6a4d9597118468c4cc63439def4116328f431df2b29
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8a2d4dc99ec29562391058037cc3ceb09e8458f40ec9c9f0c99486903c5d560a
emacs-lucid-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: ca5eedbf80db5fd857f52bc4cc68b6ae8b3ef044a6678a86f8809fd5c5ec615a
emacs-nox-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8dce92b63f1288c9bd60e17ab076babcde8abb0fed7b0b41ede8f30ccabc3435
emacs-nox-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: f747204f48d0749179c0eaad9222e8dc783cc14a4313940fd8ef8f01932c740a
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
x86_64
emacs-26.1-7.el8_6.5.x86_64.rpm SHA-256: bfeed61d58546b380cdff48b8a6462c8eb14731d971296a40efd4b8a95d5a0d0
emacs-common-26.1-7.el8_6.5.x86_64.rpm SHA-256: 1c12383897160349304cf11782803e083f39eb005258a583ce3de146f6a096c1
emacs-common-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: fae00a9a112931ed76ad682e0cc05ef795a61bfb4030b828948f8f5b67c7be5d
emacs-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: b9426483521075c6c76f408a03536bd58251d1d94f266acdf7228ce5d19f48fb
emacs-debugsource-26.1-7.el8_6.5.x86_64.rpm SHA-256: d64872b6e495401a1a7bd6a4d9597118468c4cc63439def4116328f431df2b29
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8a2d4dc99ec29562391058037cc3ceb09e8458f40ec9c9f0c99486903c5d560a
emacs-lucid-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: ca5eedbf80db5fd857f52bc4cc68b6ae8b3ef044a6678a86f8809fd5c5ec615a
emacs-nox-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8dce92b63f1288c9bd60e17ab076babcde8abb0fed7b0b41ede8f30ccabc3435
emacs-nox-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: f747204f48d0749179c0eaad9222e8dc783cc14a4313940fd8ef8f01932c740a
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
x86_64
emacs-26.1-7.el8_6.5.x86_64.rpm SHA-256: bfeed61d58546b380cdff48b8a6462c8eb14731d971296a40efd4b8a95d5a0d0
emacs-common-26.1-7.el8_6.5.x86_64.rpm SHA-256: 1c12383897160349304cf11782803e083f39eb005258a583ce3de146f6a096c1
emacs-common-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: fae00a9a112931ed76ad682e0cc05ef795a61bfb4030b828948f8f5b67c7be5d
emacs-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: b9426483521075c6c76f408a03536bd58251d1d94f266acdf7228ce5d19f48fb
emacs-debugsource-26.1-7.el8_6.5.x86_64.rpm SHA-256: d64872b6e495401a1a7bd6a4d9597118468c4cc63439def4116328f431df2b29
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8a2d4dc99ec29562391058037cc3ceb09e8458f40ec9c9f0c99486903c5d560a
emacs-lucid-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: ca5eedbf80db5fd857f52bc4cc68b6ae8b3ef044a6678a86f8809fd5c5ec615a
emacs-nox-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8dce92b63f1288c9bd60e17ab076babcde8abb0fed7b0b41ede8f30ccabc3435
emacs-nox-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: f747204f48d0749179c0eaad9222e8dc783cc14a4313940fd8ef8f01932c740a
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
ppc64le
emacs-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 6529cae57deea60fc7e6a526132fec552ce3878479f91ad7fda2cab3679f1eff
emacs-common-26.1-7.el8_6.5.ppc64le.rpm SHA-256: c1a1f203fb815071f378c50475e2bf754d77dfc81d0a0bb1d6258045109c25f4
emacs-common-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 75b8d3e5066e1a75184eff348139ac61282a6daebb082547e4a50a58e44b7fe8
emacs-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: cf0fa48533bcb92b9764f50544fd4f3e45a8afdb8d36717de5435baa447b9acb
emacs-debugsource-26.1-7.el8_6.5.ppc64le.rpm SHA-256: cf5fa3d34c7fc087a32ca1d6af69c0e60add003865be4bb5a07bd633a47d3707
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 2dcb19ba6cd5224a258c1380b8a2c2ba32554aa8efd3e9d1cd265dbdbb2c0601
emacs-lucid-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: c86557d7edd906427cd7ca368e2dcb76051b6ee87b92b52002644ff1520442c4
emacs-nox-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 7119fadea8800dedf1849a4475230a4f83c200bcedcae597bd7a2e5684c59a4b
emacs-nox-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: a845cba2dcf8092b3deffd0c34e63a29bce3775a425db4b7a36bdcecfeec14c1
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
x86_64
emacs-26.1-7.el8_6.5.x86_64.rpm SHA-256: bfeed61d58546b380cdff48b8a6462c8eb14731d971296a40efd4b8a95d5a0d0
emacs-common-26.1-7.el8_6.5.x86_64.rpm SHA-256: 1c12383897160349304cf11782803e083f39eb005258a583ce3de146f6a096c1
emacs-common-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: fae00a9a112931ed76ad682e0cc05ef795a61bfb4030b828948f8f5b67c7be5d
emacs-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: b9426483521075c6c76f408a03536bd58251d1d94f266acdf7228ce5d19f48fb
emacs-debugsource-26.1-7.el8_6.5.x86_64.rpm SHA-256: d64872b6e495401a1a7bd6a4d9597118468c4cc63439def4116328f431df2b29
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8a2d4dc99ec29562391058037cc3ceb09e8458f40ec9c9f0c99486903c5d560a
emacs-lucid-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: ca5eedbf80db5fd857f52bc4cc68b6ae8b3ef044a6678a86f8809fd5c5ec615a
emacs-nox-26.1-7.el8_6.5.x86_64.rpm SHA-256: 8dce92b63f1288c9bd60e17ab076babcde8abb0fed7b0b41ede8f30ccabc3435
emacs-nox-debuginfo-26.1-7.el8_6.5.x86_64.rpm SHA-256: f747204f48d0749179c0eaad9222e8dc783cc14a4313940fd8ef8f01932c740a
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
aarch64
emacs-26.1-7.el8_6.5.aarch64.rpm SHA-256: dc63e0aab5efe2641fad0e0bacb436fc877036e23f696bec750b73c27f5be4a0
emacs-common-26.1-7.el8_6.5.aarch64.rpm SHA-256: abfe2247f5e1bd97b0627caf071360bae44f0c2674270bd770d46baaf40d329d
emacs-common-debuginfo-26.1-7.el8_6.5.aarch64.rpm SHA-256: cf70e891bd29988480a5dddc8ac18f81a649bd2036b682f92a86c0d1160fb1da
emacs-debuginfo-26.1-7.el8_6.5.aarch64.rpm SHA-256: 868710969baf4303827b6f790fa5b90c0516ccdf0660011ad842718576018361
emacs-debugsource-26.1-7.el8_6.5.aarch64.rpm SHA-256: a7e1d4455b6f93564faf83f8fc953130f6892644690bddd52fea04d0a7b38295
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.aarch64.rpm SHA-256: 176464d9fbd07511c2a4390f4ca3faff70c1013a2137141996294227f3d1cc46
emacs-lucid-debuginfo-26.1-7.el8_6.5.aarch64.rpm SHA-256: 6c460631ce320004d56e50084196524911986bdcdd9e8c1fa18dbd9da8a64c26
emacs-nox-26.1-7.el8_6.5.aarch64.rpm SHA-256: d1323cc4e8c0527efb4644be929562483456aede70cfa864cd821b070bfb5e62
emacs-nox-debuginfo-26.1-7.el8_6.5.aarch64.rpm SHA-256: 6aca143128962dae264660253329aa8fb7dfe7196394e0f567f23c57f127dafd
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
ppc64le
emacs-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 6529cae57deea60fc7e6a526132fec552ce3878479f91ad7fda2cab3679f1eff
emacs-common-26.1-7.el8_6.5.ppc64le.rpm SHA-256: c1a1f203fb815071f378c50475e2bf754d77dfc81d0a0bb1d6258045109c25f4
emacs-common-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 75b8d3e5066e1a75184eff348139ac61282a6daebb082547e4a50a58e44b7fe8
emacs-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: cf0fa48533bcb92b9764f50544fd4f3e45a8afdb8d36717de5435baa447b9acb
emacs-debugsource-26.1-7.el8_6.5.ppc64le.rpm SHA-256: cf5fa3d34c7fc087a32ca1d6af69c0e60add003865be4bb5a07bd633a47d3707
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 2dcb19ba6cd5224a258c1380b8a2c2ba32554aa8efd3e9d1cd265dbdbb2c0601
emacs-lucid-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: c86557d7edd906427cd7ca368e2dcb76051b6ee87b92b52002644ff1520442c4
emacs-nox-26.1-7.el8_6.5.ppc64le.rpm SHA-256: 7119fadea8800dedf1849a4475230a4f83c200bcedcae597bd7a2e5684c59a4b
emacs-nox-debuginfo-26.1-7.el8_6.5.ppc64le.rpm SHA-256: a845cba2dcf8092b3deffd0c34e63a29bce3775a425db4b7a36bdcecfeec14c1
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
emacs-26.1-7.el8_6.5.src.rpm SHA-256: 600dd3e965738f4bb1d6f8d7cc4b818bde7179fa88dc6d1394ec824e080388e0
s390x
emacs-26.1-7.el8_6.5.s390x.rpm SHA-256: 211fb199cc9f3f31ef3d3be9df14550ce2baf8b46c344f0c303c5581567132e5
emacs-common-26.1-7.el8_6.5.s390x.rpm SHA-256: 6926350304b6128ba1d9960cf4f1f60c4e8686ca579bcd60abd752513195456e
emacs-common-debuginfo-26.1-7.el8_6.5.s390x.rpm SHA-256: 0a3f7fa5159df7716047663828ac6625c0ac71253e4e7e2a37ffd53d139783a5
emacs-debuginfo-26.1-7.el8_6.5.s390x.rpm SHA-256: 0a6e19071960b2bda92312601d738baff8e3932060101fb3257be949e2cb6ae1
emacs-debugsource-26.1-7.el8_6.5.s390x.rpm SHA-256: 37c8037e5f03da5b9a6b09406cccc6224ddc2572e05d1c9da4b4953839a1f527
emacs-filesystem-26.1-7.el8_6.5.noarch.rpm SHA-256: 08d27ca864986ed4f19097575400c9cd0de67282f16b7f25aa6ac700a7b03fb6
emacs-lucid-26.1-7.el8_6.5.s390x.rpm SHA-256: 8ff285aad34849de8ba76f7ba6f5654ddacc445501c41357dcbd34f453ad3334
emacs-lucid-debuginfo-26.1-7.el8_6.5.s390x.rpm SHA-256: bbc098af46e81ec7dd40b201b487b3b8dbba5d28c2d05eef17776f249bcfa771
emacs-nox-26.1-7.el8_6.5.s390x.rpm SHA-256: c38a915ec336e8ddad100220e7ad6d1ed3f150fb2c491fa8087a11b16aa58fe0
emacs-nox-debuginfo-26.1-7.el8_6.5.s390x.rpm SHA-256: ab64323654c45fdcbe469337b9e49d5252ce9d588c9ae6c54753cdd40d8f473c
emacs-terminal-26.1-7.el8_6.5.noarch.rpm SHA-256: bf4ee7faa4ff9aaac413bf708a5044bcff0d6d82b643d197c98a87208812f53a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.