Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-common | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-common-debuginfo | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-debuginfo | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-debugsource | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-lucid | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-lucid-debuginfo | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-nox | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-nox-debuginfo | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | emacs-terminal | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | emacs | 1:26.1-12.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | emacs-filesystem | 1:26.1-12.el8_10 |
Vulnerabilities 3
-
Critical 9.8
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsaf…
-
High 7.1
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
-
Medium 5.5
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2280296
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2280298
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2293942
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6987.json
-
report
https://access.redhat.com/security/cve/CVE-2024-30203
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-30203
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-30203
-
article
https://www.openwall.com/lists/oss-security/2024/03/25/2
-
report
https://access.redhat.com/security/cve/CVE-2024-30205
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-30205
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-30205
-
report
https://access.redhat.com/security/cve/CVE-2024-39331
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-39331
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-39331
-
article
https://www.openwall.com/lists/oss-security/2024/06/23/1