Red Hat Security Advisory

RHSA-2024:4971

emacs security update

Released 2024-08-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) emacs-1:26.1-7.el8_6.5, emacs-common-1:26.1-7.el8_6.5, emacs-lucid-1:26.1-7.el8_6.5 +2
Red Hat Enterprise Linux AppStream E4S (v.8.6) emacs-1:26.1-7.el8_6.5, emacs-common-1:26.1-7.el8_6.5, emacs-lucid-1:26.1-7.el8_6.5 +2
Red Hat Enterprise Linux AppStream TUS (v.8.6) emacs-1:26.1-7.el8_6.5, emacs-common-1:26.1-7.el8_6.5, emacs-lucid-1:26.1-7.el8_6.5 +2
Red Hat Enterprise Linux BaseOS AUS (v.8.6) emacs-1:26.1-7.el8_6.5, emacs-filesystem-1:26.1-7.el8_6.5
Red Hat Enterprise Linux BaseOS E4S (v.8.6) emacs-1:26.1-7.el8_6.5, emacs-filesystem-1:26.1-7.el8_6.5
Red Hat Enterprise Linux BaseOS TUS (v.8.6) emacs-1:26.1-7.el8_6.5, emacs-filesystem-1:26.1-7.el8_6.5

Fixes 1 record

TI-2024-26287 CVE-2024-39331 · GHSA-hp3p-7892-f222

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev…

MEDIUM 51

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01312 Published 2024-06-23 Partial fix CWE-94