CVE-2024-30202

概要

参考情報

• openwall.com/lists/oss-security/2024/03/25/2 · Mailing List
• openwall.com/lists/oss-security/2024/04/08/6 · Mailing List
• git.savannah.gnu.org/cgit/emacs.git/commit · Patch
• git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS · Release Notes
• git.savannah.gnu.org/cgit/emacs/org-mode.git/commit · Patch

emacs のその他の脆弱性

• CVE-2026-6861高 7.1A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Ve…
• CVE-2024-53920高 7.8In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs L…
• CVE-2024-39331緊急 9.8In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as s…
• CVE-2024-30205高 7.1In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
• CVE-2024-30204低 2.8In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.