Red Hat Security Advisory

RHSA-2024:9302

emacs security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) emacs-1:27.2-10.el9, emacs-common-1:27.2-10.el9, emacs-filesystem-1:27.2-10.el9 +2

TI-2024-19951 CVE-2024-30205 · GHSA-vxx9-qwhq-hgf4

LOW 32

In Emacs before 29.3, Org mode considers contents of remote files to be trusted.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00482 Published 2024-03-25 Partial fix CWE-494

TI-2024-19949 CVE-2024-30203 · GHSA-rmxq-q4j3-rg8f

LOW 26

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00579 Published 2024-03-25 Partial fix

TI-2024-19950 CVE-2024-30204 · GHSA-27fr-v43j-r34m

LOW 15

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00475 Published 2024-03-25 Partial fix CWE-276