Re: Incomplete fix for Emacs CVE-2026-79992
AI summary · grok-4.7-buildSummaries by Vani AI
Salvatore Bonaccorso flags CVE-2026-108976 as an incomplete fix for Emacs CVE-2026-79992.
On the oss-security list, Salvatore Bonaccorso replied that the fix for Emacs CVE-2026-79992 is incomplete and linked CVE-2026-108976. The note contains no description of the flaw, affected versions, exploitation, or a replacement patch.
Key facts
- Bonaccorso says the Emacs CVE-2026-79992 fix is incomplete.
- He points readers to newly cited CVE-2026-108976.
- The post gives no exploit details or affected versions.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-108976 | OS command injection in GNU Emacs and TRAMP via filename | 7.8 | — | ||
| CVE-2026-79992 | Shell argument injection in GNU Emacs TRAMP (incomplete fix of CVE-2024-53920) | 7.8 | <1% |
From the original article
Posted by Salvatore Bonaccorso on Oct 14 Hi, https://www. cve. org/CVERecord?
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.