DSA-5314: -1 emacs -- security update
Published Jan 11, 2023
·Updated
emacs - security update
Other sources
It was discovered that missing input sanitising in the ctags functionality of Emacs may result in the execution of arbitrary shell commands.
Affected Software
2 affected components
debian/emacs
debian/emacs
Event History
Jan 11, 2023
Advisory Published
12:00 AM
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The issue is in Emacs ctags functionality and involves missing input sanitising that may allow arbitrary shell command execution. The provided data does not specify the precise attacker-controlled input or interaction required.
2
How can I determine whether my system is affected?
Check whether Debian's emacs package is installed and compare its installed update status against the DSA-5314 security advisory. The supplied data does not include affected or fixed package versions.