Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2293-1

Опубликовано: 03 июл. 2024
Источник: suse-cvrf

Описание

Security update for emacs

This update for emacs fixes the following issues:

  • CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
emacs-24.3-25.20.1
emacs-el-24.3-25.20.1
emacs-info-24.3-25.20.1
emacs-nox-24.3-25.20.1
emacs-x11-24.3-25.20.1
etags-24.3-25.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
emacs-24.3-25.20.1
emacs-el-24.3-25.20.1
emacs-info-24.3-25.20.1
emacs-nox-24.3-25.20.1
emacs-x11-24.3-25.20.1
etags-24.3-25.20.1

Ссылки

Описание

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:emacs-24.3-25.20.1
SUSE Linux Enterprise Server 12 SP5:emacs-el-24.3-25.20.1
SUSE Linux Enterprise Server 12 SP5:emacs-info-24.3-25.20.1
SUSE Linux Enterprise Server 12 SP5:emacs-nox-24.3-25.20.1
Ссылки