Veracode Vulnerability DatabaseVERACODE:46238Privacy Leakage
emacs is vulnerable to a Privacy Leakage. The vulnerability is due to LaTeX preview being enabled by default for email attachments, allows attackers can automatically generating LaTeX previews for email attachments, potentially disclosing sensitive information to unintended recipients.
References
www.openwall.com/lists/oss-security/2024/03/25/2
www.openwall.com/lists/oss-security/2024/04/08/3
www.openwall.com/lists/oss-security/2024/04/08/4
www.openwall.com/lists/oss-security/2024/04/08/6
www.openwall.com/lists/oss-security/2024/04/08/7
www.openwall.com/lists/oss-security/2024/04/10/3
www.openwall.com/lists/oss-security/2024/04/10/4
www.openwall.com/lists/oss-security/2024/04/10/5
www.openwall.com/lists/oss-security/2024/04/10/6
www.openwall.com/lists/oss-security/2024/04/11/4
git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c
git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
lists.debian.org/debian-lts-announce/2024/04/msg00023.html
lists.debian.org/debian-lts-announce/2024/04/msg00024.html
security-tracker.debian.org/tracker/CVE-2024-30204
Related
