Red Hat Security AdvisoryRHSA-2024:6987
emacs security update
Released 2024-09-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) emacs-1:26.1-12.el8_10, emacs-common-1:26.1-12.el8_10, emacs-lucid-1:26.1-12.el8_10 +2
- Red Hat Enterprise Linux BaseOS (v. 8) emacs-1:26.1-12.el8_10, emacs-filesystem-1:26.1-12.el8_10
Fixes 3 records
Priority MEDIUM 51
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01312 · Published 2024-06-23 · Partial fix CWE-94
Priority LOW 32
In Emacs before 29.3, Org mode considers contents of remote files to be trusted.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00482 · Published 2024-03-25 · Partial fix CWE-494
Priority LOW 26
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00579 · Published 2024-03-25 · Partial fix
