OESA-2026-4406

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4406
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-4406.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-4406
Upstream
Published
2026-10-16T12:00:15Z
Modified
2026-10-16T12:15:20Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
emacs security update
Details

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.

Security Fix(es):

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)

Database specific 
{
    "severity":  "High"
}
References

Affected packages

openEuler:22.03-LTS-SP4 / emacs

Package

Name
emacs
Purl
pkg:rpm/openEuler/emacs&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
27.2-20.oe2203sp4

Ecosystem specific 

{
    "aarch64":  [
        "emacs-27.2-20.oe2203sp4.aarch64.rpm",
        "emacs-common-27.2-20.oe2203sp4.aarch64.rpm",
        "emacs-debuginfo-27.2-20.oe2203sp4.aarch64.rpm",
        "emacs-debugsource-27.2-20.oe2203sp4.aarch64.rpm",
        "emacs-devel-27.2-20.oe2203sp4.aarch64.rpm",
        "emacs-lucid-27.2-20.oe2203sp4.aarch64.rpm",
        "emacs-nox-27.2-20.oe2203sp4.aarch64.rpm"
    ],
    "noarch":  [
        "emacs-filesystem-27.2-20.oe2203sp4.noarch.rpm",
        "emacs-help-27.2-20.oe2203sp4.noarch.rpm",
        "emacs-terminal-27.2-20.oe2203sp4.noarch.rpm"
    ],
    "src":  [
        "emacs-27.2-20.oe2203sp4.src.rpm"
    ],
    "x86_64":  [
        "emacs-27.2-20.oe2203sp4.x86_64.rpm",
        "emacs-common-27.2-20.oe2203sp4.x86_64.rpm",
        "emacs-debuginfo-27.2-20.oe2203sp4.x86_64.rpm",
        "emacs-debugsource-27.2-20.oe2203sp4.x86_64.rpm",
        "emacs-devel-27.2-20.oe2203sp4.x86_64.rpm",
        "emacs-lucid-27.2-20.oe2203sp4.x86_64.rpm",
        "emacs-nox-27.2-20.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-4406.json"