Lucene search

Gentoo FoundationMGASA-2024-0104

HistoryMar 31, 2024 - 6:27 a.m.

Updated emacs packages fix security vulnerabilities

2024-03-3106:27:58

Gentoo Foundation

advisories.mageia.org

emacs

security vulnerabilities

arbitrary code execution

trusted mime contents

latex preview

remote files

7.7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. (CVE-2024-30202) In Emacs before 29.3, Gnus treats inline MIME contents as trusted. (CVE-2024-30203) In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. (CVE-2024-30204) In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. (CVE-2024-30205)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchemacs< 28.2-10.1emacs-28.2-10.1.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	emacs	< 28.2-10.1	emacs-28.2-10.1.mga9

References

bugs.mageia.org/show_bug.cgi?id=33019

www.openwall.com/lists/oss-security/2024/03/24/1

www.openwall.com/lists/oss-security/2024/03/25/2