SUSE-SU-2022:4310-1

Details

This update for emacs fixes the following issues:

CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822).

Affected Packages

emacs

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

25.3-150000.3.12.1

emacs-el

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

25.3-150000.3.12.1

emacs-info

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

25.3-150000.3.12.1

emacs-nox

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

25.3-150000.3.12.1

emacs-x11

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

25.3-150000.3.12.1

etags

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

25.3-150000.3.12.1

References

REPORT

https://bugzilla.suse.com/1205822

WEB

https://www.suse.com/security/cve/CVE-2022-45939

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224310-1/