Lucene search

K
debianDebianDEBIAN:BSA-119:15180
HistoryApr 27, 2024 - 12:15 p.m.

[BSA-119] Security Update for emacs

2024-04-2712:15:26
lists.debian.org
8
cve-2024-30205
cve-2024-30202
latex preview
emacs
org mode
cve-2024-30204
security update

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

Sean Whitton uploaded new packages for emacs which fixed the following
security problems:

CVE-2024-30202
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of
turning on Org mode. This affects Org Mode before 9.6.23.

CVE-2024-30203
<believed bogus, request submitted to MITRE to merge with next CVE>

CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail
attachments in some Emacs MUAs. This can lead to denial of service.

CVE-2024-30205
In Emacs before 29.3, Org mode considers contents of remote files to
be trusted. This affects Org Mode before 9.6.23.

For the bullseye-backports distribution, the problems have been fixed in
version 1:29.3+1-2~bpo12+1.
Attachment:
signature.asc
Description: PGP signature

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%