MGASA-2024-0104
- Source
- https://advisories.mageia.org/MGASA-2024-0104.html
- Import Source
- https://advisories.mageia.org/MGASA-2024-0104.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2024-0104
- Related
- Published
- 2024-03-31T03:27:58Z
- Modified
- 2024-03-31T03:13:04Z
- Summary
- Updated emacs packages fix security vulnerabilities
- Details
-
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. (CVE-2024-30202) In Emacs before 29.3, Gnus treats inline MIME contents as trusted. (CVE-2024-30203) In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. (CVE-2024-30204) In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. (CVE-2024-30205)
- References
- Credits
-
-
- Mageia - COORDINATOR
-