Amazon Linux 2 (EOS) Security Advisory: ALAS2-2026-3944
Advisory Released Date: 2026-09-28
Advisory Updated Date: 2026-09-28
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-read contents are interpreted as pixel color values and rendered on screen. (CVE-2026-77219)
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution. (CVE-2026-79992)
Affected Packages:
emacs
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update emacs or yum update --advisory ALAS2-2026-3944 to update your system.
aarch64:
emacs-27.2-4.amzn2.0.8.aarch64
emacs-lucid-27.2-4.amzn2.0.8.aarch64
emacs-nox-27.2-4.amzn2.0.8.aarch64
emacs-common-27.2-4.amzn2.0.8.aarch64
emacs-devel-27.2-4.amzn2.0.8.aarch64
emacs-debuginfo-27.2-4.amzn2.0.8.aarch64
i686:
emacs-27.2-4.amzn2.0.8.i686
emacs-lucid-27.2-4.amzn2.0.8.i686
emacs-nox-27.2-4.amzn2.0.8.i686
emacs-common-27.2-4.amzn2.0.8.i686
emacs-devel-27.2-4.amzn2.0.8.i686
emacs-debuginfo-27.2-4.amzn2.0.8.i686
noarch:
emacs-terminal-27.2-4.amzn2.0.8.noarch
emacs-filesystem-27.2-4.amzn2.0.8.noarch
src:
emacs-27.2-4.amzn2.0.8.src
x86_64:
emacs-27.2-4.amzn2.0.8.x86_64
emacs-lucid-27.2-4.amzn2.0.8.x86_64
emacs-nox-27.2-4.amzn2.0.8.x86_64
emacs-common-27.2-4.amzn2.0.8.x86_64
emacs-devel-27.2-4.amzn2.0.8.x86_64
emacs-debuginfo-27.2-4.amzn2.0.8.x86_64