RLSA-2024:6987
RLSA-2024:6987 · Moderate: emacs security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203) * emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205) * emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
emacs Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 1:26.1-12.el8_10
Update to 1:26.1-12.el8_10