Summary
[1:27.2-10]
- org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
- Disable xwidgets (RHEL-33447)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | emacs | 1:27.2-10.el9_4 |
| Oracle Linux · 9 | emacs-common | 1:27.2-10.el9_4 |
| Oracle Linux · 9 | emacs-filesystem | 1:27.2-10.el9_4 |
| Oracle Linux · 9 | emacs-lucid | 1:27.2-10.el9_4 |
| Oracle Linux · 9 | emacs-nox | 1:27.2-10.el9_4 |
Vulnerabilities 1
-
Critical 9.8
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsaf…