GoogleOSV:SUSE-SU-2024:2297-1Security update for emacs
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
This update for emacs fixes the following issues:
- CVE-2024-30203: Fixed denial of service via MIME contents (bsc#1222053).
- CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments (bsc#1222052).
- CVE-2024-30204: Fixed Org mode considers contents of remote files to be trusted (bsc#1222050).
- CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957).
References
bugzilla.suse.com/1222050
bugzilla.suse.com/1222052
bugzilla.suse.com/1222053
bugzilla.suse.com/1226957
www.suse.com/security/cve/CVE-2024-30203
www.suse.com/security/cve/CVE-2024-30204
www.suse.com/security/cve/CVE-2024-30205
www.suse.com/security/cve/CVE-2024-39331
www.suse.com/support/update/announcement/2024/suse-su-20242297-1/
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High