Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

[Tomas Hoger <thoger () redhat com>]

On Tue, 22 Sep 2026 15:11:54 +0000 Bas Alberts wrote:

> > Is GitHub going to assign a CVE here?  I think GitHub assignment would
> > be ok per this part of the GitHub CNA scope definition:
> > "vulnerabilities affecting open source projects discovered by security
> > researchers at GitHub or Microsoft not covered by another CNA’s scope."
> >
> > If GitHub is not doing assignment, Red Hat can provide it instead.  
>
> If Red Hat could provide the CVE in line with the previous finding of
> this report batch (CVE-2026-79992) that would be greatly appreciated.

CVE-2026-96442 was assigned for this issue.

-- 
Tomas Hoger / Red Hat Product Security