Red Hat Security Advisory

RHSA-2024:6510

emacs security update

Released 2024-09-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) emacs-1:27.2-10.el9_4, emacs-common-1:27.2-10.el9_4, emacs-filesystem-1:27.2-10.el9_4 +2

Fixes 1 record

TI-2024-26287 CVE-2024-39331 · GHSA-hp3p-7892-f222

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev…

MEDIUM 51

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01312 Published 2024-06-23 Partial fix CWE-94