General
Emacs arbitrary code execution flaw
0 views

Sean Whitton has announced
that the original fix for an arbitrary code execution flaw in Emacs (CVE-2024-53920) was
incomplete. Bas Alberts discovered that viewing or editing untrusted files in
modes other than Emacs's Lisp mode can also result in arbitrary code
execution.
This problem affects all Emacs versions affected by CVE-2024-53920.
This means Emacs 24 and newer, and possibly also older versions.
A minimal fix, attached, is queued up for release with Emacs 31.2.
We (the Emacs upstream maintainers) don't expect to backport the fix to
older Emacs releases ourselves.
LWN covered the original
vulnerability in December 2024.
Read original: https://lwn.net/Articles/1094224/
PreviousElon Musk’s heterodox robotaxi philosophy gets put to the testNextEmail Checks Need a Failure Budget
Related posts
I Read the Clankers' Code
0Hacker News
A Right-Wing Think Tank Has a Plan to Prevent Democrats From Being Seated in Congress
0Wired
White Noise Machines Worthy of Your Nightstand in 2026: Snooz, Hatch, and More
0Wired
F1 in Mexico City: Yet another Ferrari fiasco, but that’s not all
0Ars Technica
China publicly discloses plan for a lunar landing within three years
0Ars Technica
Let Me Ch...
0Hacker News