ELSA-2024-6987

ELSA-2024-6987 - emacs security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-09-24

Description

[1:26.1-12]
- org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
- org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
- Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
- Disable xwidgets (RHEL-14549)

Related CVEs

CVE-2024-30203

CVE-2024-39331

CVE-2024-30205

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	emacs-26.1-12.el8_10.src.rpm	4700293f6c533e306505886255a97e74a13b2cd6f676385f581d70e59c376ed0	-	ol8_aarch64_appstream
	emacs-26.1-12.el8_10.src.rpm	4700293f6c533e306505886255a97e74a13b2cd6f676385f581d70e59c376ed0	-	ol8_aarch64_baseos_latest
	emacs-26.1-12.el8_10.src.rpm	4700293f6c533e306505886255a97e74a13b2cd6f676385f581d70e59c376ed0	-	ol8_aarch64_u10_baseos_patch
	emacs-26.1-12.el8_10.aarch64.rpm	24a4f485eae334d8e7f20e9e104a5f5ea4f696288cfd59b7bf5a7ed71138413f	-	ol8_aarch64_appstream
	emacs-common-26.1-12.el8_10.aarch64.rpm	6d252c551e0cb463ad02fb41271f3d4c2fa3466714734651cae53bd541c3e55b	-	ol8_aarch64_appstream
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	ol8_aarch64_baseos_latest
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	ol8_aarch64_u10_baseos_patch
	emacs-lucid-26.1-12.el8_10.aarch64.rpm	7d75f30912fa9dab8d650dc5fe015c981de3e045600ff75a6b70cb1ece7dcba8	-	ol8_aarch64_appstream
	emacs-nox-26.1-12.el8_10.aarch64.rpm	5d45d78d45414a24d8bdb62f4dbe9edac1be65bc7d7dff3cf85e7204dae172b0	-	ol8_aarch64_appstream
	emacs-terminal-26.1-12.el8_10.noarch.rpm	6e03b91c206748686473cc9778884eb1b210a44f05b8fd0e740908ccc4ca7d91	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	emacs-26.1-12.el8_10.src.rpm	4700293f6c533e306505886255a97e74a13b2cd6f676385f581d70e59c376ed0	-	ol8_x86_64_appstream
	emacs-26.1-12.el8_10.src.rpm	4700293f6c533e306505886255a97e74a13b2cd6f676385f581d70e59c376ed0	-	ol8_x86_64_baseos_latest
	emacs-26.1-12.el8_10.src.rpm	4700293f6c533e306505886255a97e74a13b2cd6f676385f581d70e59c376ed0	-	ol8_x86_64_u10_baseos_patch
	emacs-26.1-12.el8_10.x86_64.rpm	26cc7e56155a1bebd3e30e6652fac678bbc8e3ad82e986eaad70d8e5b2579d28	-	ol8_x86_64_appstream
	emacs-common-26.1-12.el8_10.x86_64.rpm	461d6c66068fabc6ea67edf24a05ae643069dbece5e811cf786bcef10664e72d	-	ol8_x86_64_appstream
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_23.1.19.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_23.1.20.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_23.1.21.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_23.1.22.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_23.1.23.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_24.1.5.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_24.1.6.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_24.1.7.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_24.1.8.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_24.1.9.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_25.1.0.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_25.1.1.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	exadata_dbserver_25.1.2.0.0_x86_64_base
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	ol8_x86_64_baseos_latest
	emacs-filesystem-26.1-12.el8_10.noarch.rpm	df17d3d6390900e37f0badbf5434049caea67f57b73872b724267c8db27e1d14	-	ol8_x86_64_u10_baseos_patch
	emacs-lucid-26.1-12.el8_10.x86_64.rpm	ecd69086f45b504479e70cfcd048e2cd15384486859b5ed2813500185ce4add2	-	ol8_x86_64_appstream
	emacs-nox-26.1-12.el8_10.x86_64.rpm	163b98444609541872b90f1664d75607d01f08fd8e2fd775143871410e3fc0f2	-	ol8_x86_64_appstream
	emacs-terminal-26.1-12.el8_10.noarch.rpm	6e03b91c206748686473cc9778884eb1b210a44f05b8fd0e740908ccc4ca7d91	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team