emacs-26.1-12.el8_10

エラータID: AXSA:2024-8850:02

Release date: 
Thursday, September 26, 2024 - 17:17
Subject: 
emacs-26.1-12.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203)
* emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205)
* emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
CVE-2024-30205
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
CVE-2024-39331
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.

Solution: 

Update packages.

CVEs: 
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
CVE-2024-30205
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
CVE-2024-39331
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.
Additional Info: 

N/A

Download: 

SRPMS
  1. emacs-26.1-12.el8_10.src.rpm
    MD5: 42d79aca83ac09fe5378a91277e7020e
    SHA-256: 89f3012ecfb0775f17d692530cd10e04310905264d8fc778df6b0fc69b7f9241
    Size: 42.33 MB

Asianux Server 8 for x86_64
  1. emacs-26.1-12.el8_10.x86_64.rpm
    MD5: 8cd3a407ac689d187714782fea65f985
    SHA-256: e442f3c345c748bc296b8b9361f2d938aaa9247626bc021b68ad04b444eb0dba
    Size: 3.15 MB
  2. emacs-common-26.1-12.el8_10.x86_64.rpm
    MD5: fc4ee965ba5d3b654a3879557d451063
    SHA-256: c10f26fcf92d2164c40ff70f2c6257d1c75350906d7b03d7c37782455b4caf8f
    Size: 38.53 MB
  3. emacs-filesystem-26.1-12.el8_10.noarch.rpm
    MD5: 1829ca85f0e175d81edc20f11f7a4062
    SHA-256: ba11c14266ca6478a321881402850cbaec0aebffda521d61872ced7ab3bb1ce6
    Size: 69.39 kB
  4. emacs-lucid-26.1-12.el8_10.x86_64.rpm
    MD5: a59a6327d73f2c2d1d25dd7afc67f14b
    SHA-256: 112de948b6718afbaa64a66c20b86a47cd9c78c75b68324941b06cdcf12c2e8a
    Size: 3.13 MB
  5. emacs-nox-26.1-12.el8_10.x86_64.rpm
    MD5: d0d871cf9a9c7bed74220bf1dd38c3dc
    SHA-256: a25b35fa60f68d7ede0eae1c4b25e04a6c07b335935835c62d9016a10d8209bd
    Size: 2.75 MB
  6. emacs-terminal-26.1-12.el8_10.noarch.rpm
    MD5: 57beba69d3a2ff67ac3b5c24176a37e7
    SHA-256: 89ed2bf2f39366f2c94a1b8e46d6c258fd1f14a76476b5d4229695fc35f1074c
    Size: 70.07 kB