USN-8011-1 emacs vulnerabilities

It was discovered that Emacs could trigger unsafe Lisp macro expansion, when a user invoked elisp-completion-at-point on untrusted Emacs Lisp source code. An attacker could possibly use this issue to execute arbitrary code. CVE-2024-53920 It was discovered that Emacs did not properly sanitize inp...

CVE-2024-53920

GNU Emacs versions prior to 30.1 are vulnerable to arbitrary code execution via unsafe Lisp macro expansion in elisp-mode.el . The flaw is triggered when a user invokes elisp-completion-at-point on untrusted Emacs Lisp source code or enables on-the-fly diagnosis , which causes the byte-compilatio...

CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...