The vulnerability of the ruby-find-library-file function in the EMACS text editor arises from improper elimination of special elements used in the command, allowing an attacker to execute arbitrary code.

The vulnerability of the ruby-find-library-file function in the EMACS text editor is related to improper elimination of special elements. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the hfy-istext-command function in the EMACS text editor allows a hacker to execute arbitrary code.

The vulnerability of the hfy-istext-command function in the EMACS text editor is related to improper escaping of output data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the parameters “file” and “srcdir”...

Important: emacs

Issue Overview: In Emacs before 29.3, Gnus treats inline MIME contents as trusted. CVE-2024-30203 In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. CVE-2024-30204 In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode...

Fedora: Security Advisory (FEDORA-2024-a3fecfab32)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20240806-06

Vulnerability of ruby-find-library-file function of EMACS text editor is related to incorrect neutralization of special elements. neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in the lib-src/etags.c file of th...

CBL Mariner 2.0 Security Update: emacs (CVE-2024-39331)

The version of emacs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39331 advisory. - In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbrev even when it specifies ...

Important: emacs

Issue Overview: In Emacs before 29.3, Gnus treats inline MIME contents as trusted. CVE-2024-30203 In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. CVE-2024-30204 In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode...

In Emacs before 29.4 org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function such as shell-command-to-string. This affects Org Mode before 9.7.5.

...

CVE-2024-39331 affecting package emacs for versions less than 29.4-1

CVE-2024-39331 affecting package emacs for versions less than 29.4-1. An upgraded version of the package is available that resolves this issue...

Moderate: Red Hat Security Advisory: emacs security update

An update for emacs is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code

A flaw was found in Emacs. Arbitrary shell commands can be executed without prompting when an Org mode file is opened or when the Org mode is enabled, when Emacs is used as an email client, this issue can be triggered when previewing email attachments...

RHEL 8 : emacs (RHSA-2024:4971)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4971 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the...

Mageia: Security Advisory (MGASA-2024-0276)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerability of the org-babel-execute function: latex() in the text editor EMACS, allowing an attacker to execute arbitrary code

The vulnerability of the org-babel-execute:latex function in the text editor EMACS is related to the improper elimination of special elements used in the command. Exploiting this vulnerability may allow an attacker to execute arbitrary code...

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS allows a hacker to execute arbitrary code.

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS is related to the improper elimination of special elements. Exploiting this vulnerability may allow an attacker to execute arbitrary code...

Updated emacs packages improve Wayland support and fix a security vulnerability

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbrev even when it specifies an unsafe function, such as shell-command-to-string. CVE-2024-39331...

MGASA-2024-0276 Updated emacs packages improve Wayland support and fix a security vulnerability

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbrev even when it specifies an unsafe function, such as shell-command-to-string. CVE-2024-39331...

ROS-20240731-01

A vulnerability in the lib-src/etags.c file of the ctags component of the EMACS text editor is related to improper neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in the org-babel-execute:latex function of the...

Photon OS 5.0: Emacs PHSA-2024-5.0-0314

An update of the emacs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0314. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Emacs PHSA-2023-5.0-0010

An update of the emacs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...