Red Hat Product Errata RHSA-2026:98574 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:98574 - Security Advisory

Synopsis

Important: emacs security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for emacs is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)
  • emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)
  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)
  • emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64

Fixes

  • BZ - 2521196 - CVE-2026-77219 emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image
  • BZ - 2523665 - CVE-2026-79992 emacs: emacs: Command injection via crafted filenames in TRAMP
  • BZ - 2537347 - CVE-2026-96442 emacs: Emacs: arbitrary code execution in Flymake mode
  • BZ - 2538925 - CVE-2026-96269 emacs: GNU Emacs: Arbitrary code execution upon opening a file

Red Hat Enterprise Linux for x86_64 10

SRPM
emacs-29.4-17.el10_3.src.rpm SHA-256: 62f02be56d481c324571fe610d6111149e3b582bd6bd456ee9e88745bc64e757
x86_64
emacs-29.4-17.el10_3.x86_64.rpm SHA-256: 40a2049114dbe4f0f868c07823c9d7347708e8131ddde0761dc2fa9a5cd984a4
emacs-common-29.4-17.el10_3.x86_64.rpm SHA-256: 8e1d6765fb46d7d10bc40af7b2cc35d87824ddf5cd006a5d0e993eecf3f84ef1
emacs-common-debuginfo-29.4-17.el10_3.x86_64.rpm SHA-256: 82c1d8ef1c4d27544b92b8e069e8bbf3d68243b8ae99c9148f78e1611f6f005b
emacs-debuginfo-29.4-17.el10_3.x86_64.rpm SHA-256: 58866e4cbb8f1b930ffcb006eaaaf3f1b6626abc6607f86cd07694818c27d79b
emacs-debugsource-29.4-17.el10_3.x86_64.rpm SHA-256: 51325714791722a666023397ea11b1f0ec24fedf76b06b6153094d4474e5bbef
emacs-filesystem-29.4-17.el10_3.noarch.rpm SHA-256: 68e1e052c0c34ea6f31fbb79373bb5d0932c7b32ed7c2a503f88f19ede9ef0f5
emacs-gtk+x11-debuginfo-29.4-17.el10_3.x86_64.rpm SHA-256: 79dde8999af9ed40ae7c348778010e280b64461ff73113115363d264a7af4390
emacs-lucid-29.4-17.el10_3.x86_64.rpm SHA-256: e5b3dc9f477b1b4b5d60bd9af7c2a029a2504b030dd4f6b5b82df19cd76838e2
emacs-lucid-debuginfo-29.4-17.el10_3.x86_64.rpm SHA-256: 6caed1250ed9b749a72e71eb96b71bf66815fa9bd523125849a79d566ef73656
emacs-nw-29.4-17.el10_3.x86_64.rpm SHA-256: fcd13c4c0f2b96eb96f6fee098f2e42102590a1baa685f03ae4085362efff138
emacs-nw-debuginfo-29.4-17.el10_3.x86_64.rpm SHA-256: e2ded5905621c66153479e2541d9fe4affdc775522f7e4bd496888efca89412a

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
emacs-29.4-17.el10_3.src.rpm SHA-256: 62f02be56d481c324571fe610d6111149e3b582bd6bd456ee9e88745bc64e757
s390x
emacs-29.4-17.el10_3.s390x.rpm SHA-256: 630d6d23f084d26de88325ebaae8e136c1ad4b68871051be21e1dc656c36a707
emacs-common-29.4-17.el10_3.s390x.rpm SHA-256: 83879bb05382552cca5a26509dd9d71b0acbaa0f8c6780b3a05f8eba3f4d08b4
emacs-common-debuginfo-29.4-17.el10_3.s390x.rpm SHA-256: e24c54470d8c900854c7b469d36c303a61857a0e4c4192ad9386bf1a9f39c710
emacs-debuginfo-29.4-17.el10_3.s390x.rpm SHA-256: ed319447ffe6759d136783bdfcf5ed00ed4a348658d7dca2f257c496e6dbbfcc
emacs-debugsource-29.4-17.el10_3.s390x.rpm SHA-256: 119fc21b8d0fc71ecb642ffeb45460bf3e0348e3097400c85158dba29f7b6156
emacs-filesystem-29.4-17.el10_3.noarch.rpm SHA-256: 68e1e052c0c34ea6f31fbb79373bb5d0932c7b32ed7c2a503f88f19ede9ef0f5
emacs-gtk+x11-debuginfo-29.4-17.el10_3.s390x.rpm SHA-256: 728b0eff1cf79d4cf2616df027c9c867844eb5c5e5b76621b6b31b4045165ab7
emacs-lucid-29.4-17.el10_3.s390x.rpm SHA-256: dd2c121e026ba655b0506f9221699a598aa0db20378139926bbc1510e23592c5
emacs-lucid-debuginfo-29.4-17.el10_3.s390x.rpm SHA-256: 12dfd03b82e357d40834455f96b1984883b4a80ef82064e8013f3eb2b9222be3
emacs-nw-29.4-17.el10_3.s390x.rpm SHA-256: b5fcfce33b6066b39313b5cc1a85951b4158e7e06061c65eb1b17f883d9ec1c6
emacs-nw-debuginfo-29.4-17.el10_3.s390x.rpm SHA-256: 0258213eec550fcbc85c90062cee5e5f0c07fe755933619dcac7c75dacee7996

Red Hat Enterprise Linux for Power, little endian 10

SRPM
emacs-29.4-17.el10_3.src.rpm SHA-256: 62f02be56d481c324571fe610d6111149e3b582bd6bd456ee9e88745bc64e757
ppc64le
emacs-29.4-17.el10_3.ppc64le.rpm SHA-256: d2eeb95a4f7b4f8e27d2798a517c0125462d4345f4e21ce3881f7f40329fd6e5
emacs-common-29.4-17.el10_3.ppc64le.rpm SHA-256: 71773735288c37fb5bfc18df5a21d38cb83fb185fa5b9bebb2da86f84e311e9f
emacs-common-debuginfo-29.4-17.el10_3.ppc64le.rpm SHA-256: 14f42a624c4a6cc6be4791150877fd9f766af55f7247e459073faf0d8e19391a
emacs-debuginfo-29.4-17.el10_3.ppc64le.rpm SHA-256: 585e505f25e5d32796baf81b54d14f36755c5a4f637750aa3010758df6784712
emacs-debugsource-29.4-17.el10_3.ppc64le.rpm SHA-256: f5bbedebe9129e549d0c87a6e999a7ae0e958f8b20e387970825f7c241d9dcb5
emacs-filesystem-29.4-17.el10_3.noarch.rpm SHA-256: 68e1e052c0c34ea6f31fbb79373bb5d0932c7b32ed7c2a503f88f19ede9ef0f5
emacs-gtk+x11-debuginfo-29.4-17.el10_3.ppc64le.rpm SHA-256: 87113e4b7cea63143929c3824911027fa57391cf22474e3cc4b8114a07ec5f0c
emacs-lucid-29.4-17.el10_3.ppc64le.rpm SHA-256: e05a103b61950e65a9c5f50217cf7ed73f8fc1bc3768b409e0055850d585d794
emacs-lucid-debuginfo-29.4-17.el10_3.ppc64le.rpm SHA-256: 026bf6040b2a1cbfbd860caab5adc09cf34618ca64a1d28413c97caf341f078c
emacs-nw-29.4-17.el10_3.ppc64le.rpm SHA-256: 58fa05c3972b7075e93e1a24f8ca3219d64509654e87a3e37f834ba800c3084e
emacs-nw-debuginfo-29.4-17.el10_3.ppc64le.rpm SHA-256: 248e5e8a7665780babe787bf5975fadba4c58739865bf4bad87e7a9e7dc49e2e

Red Hat Enterprise Linux for ARM 64 10

SRPM
emacs-29.4-17.el10_3.src.rpm SHA-256: 62f02be56d481c324571fe610d6111149e3b582bd6bd456ee9e88745bc64e757
aarch64
emacs-29.4-17.el10_3.aarch64.rpm SHA-256: 2a31b995f530a597b3927a36da3ef797491ac033dc0bcd2d75c239f862b0ae14
emacs-common-29.4-17.el10_3.aarch64.rpm SHA-256: 79eba4fd8d6ead3edaffd6900dc3e89603229ceb80454dd9b357c8003384354f
emacs-common-debuginfo-29.4-17.el10_3.aarch64.rpm SHA-256: d90fe9399ca997e1ca798f839614fda9f98bc5bd03bcfde0e51b521510f368ad
emacs-debuginfo-29.4-17.el10_3.aarch64.rpm SHA-256: 83d6188c5ade160f16e07e00de5145ea8501ab6ddad45a376d1c166eddec54d4
emacs-debugsource-29.4-17.el10_3.aarch64.rpm SHA-256: 11baa0b3ffe253c552c6ccdb236e494ff1befadc4744d470b7ab8240d4b5f7e1
emacs-filesystem-29.4-17.el10_3.noarch.rpm SHA-256: 68e1e052c0c34ea6f31fbb79373bb5d0932c7b32ed7c2a503f88f19ede9ef0f5
emacs-gtk+x11-debuginfo-29.4-17.el10_3.aarch64.rpm SHA-256: 604415884784ca7b3f1cf8203718681efcc1cc9f1769b3494b4f826cb9ba0375
emacs-lucid-29.4-17.el10_3.aarch64.rpm SHA-256: fdd40441e6415102cebc31a225392dcb835fd180530845520476852ab17d5e64
emacs-lucid-debuginfo-29.4-17.el10_3.aarch64.rpm SHA-256: e1447908e854560bb81430790642acf4fa8c473c7e5f66cd748af2cd6adfd0f4
emacs-nw-29.4-17.el10_3.aarch64.rpm SHA-256: 79c9aac6e381e0e92fa442fd84def5272a1c6383202fb9093af0252a561316c7
emacs-nw-debuginfo-29.4-17.el10_3.aarch64.rpm SHA-256: 34c84c1d92ae9222b1023405f3ddc7d4d702f552d9cb6a4bd708dd117b2edeb1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.