Ubuntu alert USN-8835-1 (emacs)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8835-1] Emacs vulnerability
Date:
             
 
Tue, 29 Sep 2026 16:07:56 +0000
Message-ID:
             
 
<E1xBaN2-0005QO-0q@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8835-1
September 28, 2026

emacs vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS

Summary:

Emacs could be made to crash or expose sensitive information if it opened
a specially crafted file.

Software Description:
- emacs: GNU Emacs editor

Details:

It was discovered that Emacs improperly handled specially crafted SVG
images, resulting in memory corruption. An attacker could possibly use
this issue to cause Emacs to crash, resulting in a denial of service, or
obtain sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  emacs                           1:30.2+1-2ubuntu1+esm1
                                  Available with Ubuntu Pro

Ubuntu 24.04 LTS
  emacs                           1:29.3+1-1ubuntu2+esm4
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8835-1
  CVE-2026-6861


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=AvMQ
-----END PGP SIGNATURE-----