Lucene search
Gentoo FoundationMGASA-2024-0276HistoryJul 31, 2024 - 10:34 p.m.
Updated emacs packages improve Wayland support and fix a security vulnerability
2024-07-3122:34:18
Gentoo Foundation
advisories.mageia.org
12
emacs
wayland support
security vulnerability
cve-2024-39331
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(…) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. (CVE-2024-39331)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | emacs | < 29.4-1 | emacs-29.4-1.mga9 |
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2567-1)
2024-07-22 00:00:00
Debian: Security Advisory (DLA-3848-1)
2024-07-01 00:00:00
Debian: Security Advisory (DSA-5719-1)
2024-07-01 00:00:00
redos
redos
ROS-20240716-03
2024-07-16 00:00:00
nessus
nessus
Fedora 39 : emacs (2024-3fedeba41f)
2024-07-02 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2024:2567-1)
2024-07-22 00:00:00
Photon OS 5.0: Emacs PHSA-2024-5.0-0314
2024-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: emacs-29.4-3.fc40
2024-06-28 01:59:29
[SECURITY] Fedora 39 Update: emacs-29.4-2.fc39
2024-07-02 01:24:00
cve
cve
CVE-2024-39331
2024-06-23 22:15:09
almalinux
almalinux
Moderate: emacs security update
2024-09-09 00:00:00
osv
osv
emacs - security update
2024-06-29 00:00:00
org-mode - security update
2024-06-25 00:00:00
CVE-2024-39331
2024-06-23 22:15:00
redhat
redhat
(RHSA-2024:6510) Moderate: emacs security update
2024-09-09 18:02:20
(RHSA-2024:4971) Moderate: emacs security update
2024-08-01 07:42:32
(RHSA-2024:6203) Moderate: emacs security update
2024-09-03 07:15:05
vulnrichment
vulnrichment
CVE-2024-39331
2024-06-23 00:00:00
nvd
nvd
CVE-2024-39331
2024-06-23 22:15:09
ubuntucve
ubuntucve
CVE-2024-39331
2024-06-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-39331 affecting package emacs for versions less than 29.4-1
2024-08-05 03:22:58
CVE-2024-39331 affecting package emacs for versions less than 29.4-1
2024-07-22 23:01:50
debiancve
debiancve
CVE-2024-39331
2024-06-23 22:15:09
redhatcve
redhatcve
CVE-2024-39331
2024-06-24 13:53:33
cvelist
cvelist
CVE-2024-39331
2024-06-23 00:00:00
oraclelinux
oraclelinux
emacs security update
2024-09-09 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0650
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0314
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0771
2024-07-12 00:00:00
amazon
amazon
Important: emacs
2024-08-01 03:01:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
Related for MGASA-2024-0276