Linux · Security advisory · November 7, 2026

RLSA-2026:90887: emacs security update

RLSA-2026:90887, released November 7, 2026, fixes 1 CVE in emacs (version 1:29.4-14.el10_2.4). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0014
3rd percentile

Fixed package versions

ProductReleaseFixed in
emacsrocky 101:29.4-14.el10_2.4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-96269 GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it. 7.8 0.0014 None reported
Showing 1 to 1 of 1 1