Bug 2192873 (CVE-2023-2491) - CVE-2023-2491 emacs: Regression of CVE-2023-28617 fixes in the Red Hat Enterprise Linux
Summary: CVE-2023-2491 emacs: Regression of CVE-2023-28617 fixes in the Red Hat Enterp...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2023-2491
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2192880 2192881
Blocks: 2179730
TreeView+ depends on / blocked
 
Reported: 2023-05-03 11:25 UTC by TEJ RATHI
Modified: 2024-03-20 10:16 UTC (History)
1 user (show)

Fixed In Version: emacs 26.1-10.el8_8.2, emacs 27.2-8.el9_2.1
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Clone Of:
Environment:
Last Closed: 2023-05-17 04:31:02 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2023:3231 0 None None None 2023-05-18 17:26:32 UTC
Red Hat Product Errata RHBA-2023:3232 0 None None None 2023-05-18 17:47:18 UTC
Red Hat Product Errata RHBA-2023:3233 0 None None None 2023-05-18 17:08:42 UTC
Red Hat Product Errata RHBA-2023:3234 0 None None None 2023-05-18 17:11:17 UTC
Red Hat Product Errata RHBA-2023:3235 0 None None None 2023-05-18 17:11:27 UTC
Red Hat Product Errata RHBA-2023:3239 0 None None None 2023-05-22 01:17:53 UTC
Red Hat Product Errata RHBA-2023:3249 0 None None None 2023-05-22 07:37:16 UTC
Red Hat Product Errata RHBA-2023:3281 0 None None None 2023-05-23 19:08:26 UTC
Red Hat Product Errata RHBA-2023:3334 0 None None None 2023-05-26 01:49:11 UTC
Red Hat Product Errata RHBA-2023:3375 0 None None None 2023-05-31 12:49:49 UTC
Red Hat Product Errata RHSA-2023:2626 0 None None None 2023-05-09 11:04:14 UTC
Red Hat Product Errata RHSA-2023:3104 0 None None None 2023-05-16 10:01:59 UTC

Description TEJ RATHI 2023-05-03 11:25:01 UTC 
The Emacs flaw CVE-2023-28617 (bug 2180544) was addressed in Red Hat Enterprise Linux 8 via erratum RHSA-2023:1930 and in Red Hat Enterprise Linux 9 via erratum RHSA-2023:2074, released on Apr 24, 2023 and May 02, 2023 respectively.

https://access.redhat.com/errata/RHSA-2023:1930
https://access.redhat.com/errata/RHSA-2023:2074 

However, the fix for this issue was not included in the Emacs updates released as part of Red Hat Enterprise Linux 8.8 GA erratum (RHSA-2023:3042) and Red Hat Enterprise Linux 9.2 GA erratum (RHSA-2023:2366), causing a security regression of previously released fix. A new CVE-ID CVE-2023-2491 was assigned for this security regression.

Note that this issue and CVE-ID is specific to the Emacs packages as shipped with Red Hat Enterprise Linux and is not applicable to any upstream Emacs version or Emacs packages of any other vendor that are not directly based on Red Hat Enterprise Linux packages.

For more information about the original flaw, refer to the CVE page or bug linked above.
Comment 3 errata-xmlrpc 2023-05-09 11:04:12 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:2626 https://access.redhat.com/errata/RHSA-2023:2626
Comment 4 errata-xmlrpc 2023-05-16 10:01:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:3104 https://access.redhat.com/errata/RHSA-2023:3104
Comment 5 Product Security DevOps Team 2023-05-17 04:31:00 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2023-2491
Note You need to log in before you can comment on or make changes to this bug.