GNU Emacs: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 2

• High 7.8
  CVE-2023-27985

  emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto:…

  xemacs21-packages xemacs21 emacs emacs Debian Ubuntu Azure Linux Alpine
  Mar 9, 2023
• High 7.8
  CVE-2023-27986

  emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailt…

  xemacs21-packages xemacs21 emacs emacs Debian Ubuntu Azure Linux Alpine
  Mar 9, 2023

Revision history

1. 2023-03-08 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2023-03-08
  https://github.com/advisories/GHSA-whwp-m746-hx6w
• GitHub Advisory Database vom 2023-03-08
  https://github.com/advisories/GHSA-f5fq-43fc-vgcr