USN-7027-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-7027-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7027-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-7027-1
Related
Published
2024-09-19T17:16:05.981190Z
Modified
2024-09-19T17:16:05.981190Z
Summary
emacs, emacs24, emacs25 vulnerabilities
Details

It was discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-45939)

Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-48337)

Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-48338)

Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-48339)

It was discovered that Emacs incorrectly handled filename sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-28617)

It was discovered that Emacs incorrectly handled certain crafted files. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-30203, CVE-2024-30204, CVE-2024-30205)

It was discovered that Emacs incorrectly handled certain crafted files. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2024-39331)

References

Affected packages

Ubuntu:Pro:16.04:LTS / emacs24

Package

Name
emacs24
Purl
pkg:deb/ubuntu/emacs24@24.5+1-6ubuntu1.1+esm4?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
24.5+1-6ubuntu1.1+esm4

Affected versions

24.*

24.5+1-1ubuntu2
24.5+1-1ubuntu4
24.5+1-1ubuntu5
24.5+1-1ubuntu6
24.5+1-1ubuntu7
24.5+1-6ubuntu1
24.5+1-6ubuntu1.1
24.5+1-6ubuntu1.1+esm1
24.5+1-6ubuntu1.1+esm2
24.5+1-6ubuntu1.1+esm3

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "emacs24-common": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-dbg": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-bin-common-dbgsym": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-el": "24.5+1-6ubuntu1.1+esm4",
            "emacs24": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-lucid": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-lucid-dbgsym": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-bin-common": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-dbgsym": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-lucid-dbg": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-nox": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-nox-dbg": "24.5+1-6ubuntu1.1+esm4",
            "emacs24-nox-dbgsym": "24.5+1-6ubuntu1.1+esm4"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / emacs25

Package

Name
emacs25
Purl
pkg:deb/ubuntu/emacs25@25.2+1-6ubuntu0.1~esm2?arch=src?distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
25.2+1-6ubuntu0.1~esm2

Affected versions

25.*

25.2+1-6

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "emacs25-bin-common-dbgsym": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-bin-common": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-lucid": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-lucid-dbg": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-nox": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-el": "25.2+1-6ubuntu0.1~esm2",
            "emacs25": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-dbg": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-common": "25.2+1-6ubuntu0.1~esm2",
            "emacs25-nox-dbg": "25.2+1-6ubuntu0.1~esm2"
        }
    ]
}

Ubuntu:Pro:20.04:LTS / emacs

Package

Name
emacs
Purl
pkg:deb/ubuntu/emacs@1:26.3+1-1ubuntu2+esm1?arch=src?distro=esm-apps/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:26.3+1-1ubuntu2+esm1

Affected versions

1:26.*

1:26.3+1-1ubuntu1
1:26.3+1-1ubuntu2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "emacs-bin-common-dbgsym": "1:26.3+1-1ubuntu2+esm1",
            "emacs-lucid": "1:26.3+1-1ubuntu2+esm1",
            "emacs-lucid-dbgsym": "1:26.3+1-1ubuntu2+esm1",
            "emacs-gtk-dbgsym": "1:26.3+1-1ubuntu2+esm1",
            "emacs-nox": "1:26.3+1-1ubuntu2+esm1",
            "emacs": "1:26.3+1-1ubuntu2+esm1",
            "emacs-common": "1:26.3+1-1ubuntu2+esm1",
            "emacs-nox-dbgsym": "1:26.3+1-1ubuntu2+esm1",
            "emacs-gtk": "1:26.3+1-1ubuntu2+esm1",
            "emacs-el": "1:26.3+1-1ubuntu2+esm1",
            "emacs-bin-common": "1:26.3+1-1ubuntu2+esm1"
        }
    ]
}

Ubuntu:22.04:LTS / emacs

Package

Name
emacs
Purl
pkg:deb/ubuntu/emacs@1:27.1+1-3ubuntu5.2?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:27.1+1-3ubuntu5.2

Affected versions

1:27.*

1:27.1+1-3ubuntu3
1:27.1+1-3ubuntu5
1:27.1+1-3ubuntu5.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "emacs-bin-common-dbgsym": "1:27.1+1-3ubuntu5.2",
            "emacs-lucid": "1:27.1+1-3ubuntu5.2",
            "emacs-lucid-dbgsym": "1:27.1+1-3ubuntu5.2",
            "emacs-gtk-dbgsym": "1:27.1+1-3ubuntu5.2",
            "emacs-nox": "1:27.1+1-3ubuntu5.2",
            "emacs": "1:27.1+1-3ubuntu5.2",
            "emacs-common": "1:27.1+1-3ubuntu5.2",
            "emacs-nox-dbgsym": "1:27.1+1-3ubuntu5.2",
            "emacs-gtk": "1:27.1+1-3ubuntu5.2",
            "emacs-el": "1:27.1+1-3ubuntu5.2",
            "emacs-bin-common": "1:27.1+1-3ubuntu5.2"
        }
    ]
}

Ubuntu:Pro:24.04:LTS / emacs

Package

Name
emacs
Purl
pkg:deb/ubuntu/emacs@1:29.3+1-1ubuntu2+esm1?arch=src?distro=esm-apps/noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:29.3+1-1ubuntu2+esm1

Affected versions

1:29.*

1:29.1+1-5ubuntu1
1:29.2+1-1ubuntu1
1:29.2+1-2ubuntu4
1:29.3+1-1ubuntu2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "emacs-bin-common-dbgsym": "1:29.3+1-1ubuntu2+esm1",
            "emacs-lucid": "1:29.3+1-1ubuntu2+esm1",
            "emacs-lucid-dbgsym": "1:29.3+1-1ubuntu2+esm1",
            "emacs-gtk-dbgsym": "1:29.3+1-1ubuntu2+esm1",
            "emacs-nox": "1:29.3+1-1ubuntu2+esm1",
            "emacs": "1:29.3+1-1ubuntu2+esm1",
            "emacs-common": "1:29.3+1-1ubuntu2+esm1",
            "emacs-nox-dbgsym": "1:29.3+1-1ubuntu2+esm1",
            "emacs-gtk": "1:29.3+1-1ubuntu2+esm1",
            "emacs-el": "1:29.3+1-1ubuntu2+esm1",
            "emacs-pgtk-dbgsym": "1:29.3+1-1ubuntu2+esm1",
            "emacs-bin-common": "1:29.3+1-1ubuntu2+esm1",
            "emacs-pgtk": "1:29.3+1-1ubuntu2+esm1"
        }
    ]
}