emacs-27.2-11.el9_5.2

エラータID: AXSA:2025-9922:03

Release date: 
Monday, May 12, 2025 - 21:53
Subject: 
emacs-27.2-11.el9_5.2
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-53920
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Solution: 

Update packages.

CVEs: 
CVE-2024-53920
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
Additional Info: 

N/A

Download: 

SRPMS
  1. emacs-27.2-11.el9_5.2.src.rpm
    MD5: fd0f8a67b7327566f14e62e1567465dd
    SHA-256: 7935e1248909960e9f6b59a0e6fff77bf2747b2756225dde00ab949c5c38da8d
    Size: 42.75 MB

Asianux Server 9 for x86_64
  1. emacs-27.2-11.el9_5.2.x86_64.rpm
    MD5: cd47dcc01b4f583ab41964e251857f73
    SHA-256: 405dad8bdbce4cdf83575ff2abf92cd2cc2cbe1133d7f0fad1b5dd0f5a0e0c63
    Size: 3.28 MB
  2. emacs-common-27.2-11.el9_5.2.x86_64.rpm
    MD5: 7cb078eb576e73341f51e7eb9f906014
    SHA-256: f633172e833af0ec640b494b6eced882d788c5bd7f1d2be166a3189c162c7493
    Size: 36.49 MB
  3. emacs-filesystem-27.2-11.el9_5.2.noarch.rpm
    MD5: 742ffb3072cbcfca20146fb2e545e44c
    SHA-256: 6dc89e36bb152d2ce23269f5316533789557b7522cd1d00d17b8321297dd71ed
    Size: 7.64 kB
  4. emacs-lucid-27.2-11.el9_5.2.x86_64.rpm
    MD5: 5569969d7e87198871a6798814798c0c
    SHA-256: e499143c8f375495f3fa223b88299b0e8d1d70dfaf51781fcac09b1f508992b5
    Size: 3.24 MB
  5. emacs-nox-27.2-11.el9_5.2.x86_64.rpm
    MD5: 09ed22f8eb2b1e7cae9f97ec7198f1d3
    SHA-256: 075930598ce15e07dc82ff1b7b2fd8c77cdd248d965d74e19944c2dc469a597a
    Size: 2.83 MB