Incomplete fix for Emacs CVE-2026-79992

Summary by Cyber Security News11 Oct 2026, 17:15 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/132

Posted by Sean Whitton on Oct 11 Wonyoung Jung of 78ResearchLab, using their PatchHawk tool, discovered that the fix for CVE-2026-79992 was incomplete. The tramp-user-regexp failed to check for some additional problematic characters in user names, meaning that exploitation was still possible. The attached patch by TRAMP maintainer Michael Albinus addresses the problem.

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.