Amazon Linux 2023 Security Advisory: ALAS2023-2026-3195
Advisory Released Date: 2026-10-12
Advisory Updated Date: 2026-10-12
Severity:
Important
Issue Overview:
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure. (CVE-2026-6861)
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs. (CVE-2026-96442)
Affected Packages:
emacs
Issue Correction:
Run dnf update emacs --releasever 2023.12.20261012 or dnf update --advisory ALAS2023-2026-3195 --releasever 2023.12.20261012 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
emacs-debuginfo-28.2-3.amzn2023.0.12.aarch64
emacs-devel-28.2-3.amzn2023.0.12.aarch64
emacs-nox-debuginfo-28.2-3.amzn2023.0.12.aarch64
emacs-lucid-debuginfo-28.2-3.amzn2023.0.12.aarch64
emacs-common-debuginfo-28.2-3.amzn2023.0.12.aarch64
emacs-debugsource-28.2-3.amzn2023.0.12.aarch64
emacs-nox-28.2-3.amzn2023.0.12.aarch64
emacs-lucid-28.2-3.amzn2023.0.12.aarch64
emacs-28.2-3.amzn2023.0.12.aarch64
emacs-common-28.2-3.amzn2023.0.12.aarch64
noarch:
emacs-filesystem-28.2-3.amzn2023.0.12.noarch
emacs-terminal-28.2-3.amzn2023.0.12.noarch
src:
emacs-28.2-3.amzn2023.0.12.src
x86_64:
emacs-nox-debuginfo-28.2-3.amzn2023.0.12.x86_64
emacs-devel-28.2-3.amzn2023.0.12.x86_64
emacs-debuginfo-28.2-3.amzn2023.0.12.x86_64
emacs-common-debuginfo-28.2-3.amzn2023.0.12.x86_64
emacs-debugsource-28.2-3.amzn2023.0.12.x86_64
emacs-lucid-debuginfo-28.2-3.amzn2023.0.12.x86_64
emacs-nox-28.2-3.amzn2023.0.12.x86_64
emacs-28.2-3.amzn2023.0.12.x86_64
emacs-lucid-28.2-3.amzn2023.0.12.x86_64
emacs-common-28.2-3.amzn2023.0.12.x86_64