CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
References
www.openwall.com/lists/oss-security/2024/03/25/2
www.openwall.com/lists/oss-security/2024/04/08/3
www.openwall.com/lists/oss-security/2024/04/08/4
www.openwall.com/lists/oss-security/2024/04/08/6
www.openwall.com/lists/oss-security/2024/04/08/7
www.openwall.com/lists/oss-security/2024/04/10/3
www.openwall.com/lists/oss-security/2024/04/10/4
www.openwall.com/lists/oss-security/2024/04/10/5
www.openwall.com/lists/oss-security/2024/04/10/6
www.openwall.com/lists/oss-security/2024/04/11/4
www.openwall.com/lists/oss-security/2024/04/11/5
www.openwall.com/lists/oss-security/2024/04/11/6
git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b9042ad7426acdcca33e3d931d8f495bdd804
git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
lists.debian.org/debian-lts-announce/2024/04/msg00023.html
lists.debian.org/debian-lts-announce/2024/04/msg00024.html
Related
