High ALAS2023-2024-584 1 CVE

Important: emacs security update (Amazon Linux 2023)

Published Apr 10, 2024 · Updated Apr 15, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-30202: In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

Fixed packages 12

Release	Package	Fixed in
Amazon Linux · 2023	emacs	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-common	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-common-debuginfo	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-debuginfo	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-debugsource	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-devel	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-filesystem	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-lucid	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-lucid-debuginfo	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-nox	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-nox-debuginfo	1:28.2-3.amzn2023.0.7
Amazon Linux · 2023	emacs-terminal	1:28.2-3.amzn2023.0.7

Vulnerabilities 1

High 7.8

CVE-2024-30202

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6…

xemacs21-packages xemacs21 emacs25 emacs24 Debian Ubuntu Azure Linux

Mar 25, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2024-30202.html