An update of the emacs package has been released.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4787 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9448 advisory.

    [1:27.2-14.el9_6.2]
    - Restore definition of variable 'enable-dir-local-variables' (RHEL-92653)

    [1:27.2-14.el9_6.1]
    - Bump Z-stream release

    [1:27.2-14]
    - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399)

    [1:27.2-13]
    - Bump release

    [1:27.2-12]
    - Eliminate use of obsolete patch syntax (RHEL-80443)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for     code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows     attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-     the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)(CVE-2024-53920)

Tenable has extracted the preceding description block directly from the EulerOS emacs security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11030 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202506-01 (Emacs: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Emacs, org-mode. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4069 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4069-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     February 27, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : emacs     Version        : 1:27.1+1-3.1+deb11u6     CVE ID         : CVE-2023-28617 CVE-2024-53920 CVE-2025-1244     Debian Bug     : 1033342 1088690 1098255

    Multiple vulnerabilities were discovered in GNU Emacs, the extensible,     customisable, self-documenting, real-time display editor.

    CVE-2023-28617

        Improper handling of file or directory names containing shell         metacharacters in the ob-latex Lisp library could allow the         execution of attacker-controlled code.

    CVE-2024-53920

        Several ways to trigger arbitrary code execution were discovered in         Emacs's support for editing files in its own dialect of Lisp.
        These include arbitrary code execution upon opening an otherwise         innocent-looking file, with any (or no) file extension, for editing.

    CVE-2025-1244

        Improper handling of custom 'man' URI schemes could allow an         attacker to execute arbitrary shell commands by tricking users into         visiting a specially crafted website, or an HTTP URL with a         redirect.

    For Debian 11 bullseye, these problems have been fixed in version     1:27.1+1-3.1+deb11u6.

    We recommend that you upgrade your emacs packages.

    For the detailed security status of emacs please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/emacs

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986127 advisory.

    In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for     code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows     attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-     the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has emacs packages installed that are affected by multiple vulnerabilities:

  - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a     source-code file, because lib-src/etags.c uses the system C library function in its implementation of the     etags program. For example, a victim may use the etags -u * command (suggested in the etags     documentation) in a situation where the current working directory has contents that depend on untrusted     input. (CVE-2022-48337)

  - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a     source-code file, because lib-src/etags.c uses the system C library function in its implementation of the     ctags program. For example, a victim may use the ctags * command (suggested in the ctags documentation)     in a situation where the current working directory has contents that depend on untrusted input.
    (CVE-2022-45939)

  - An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function     has a local command injection vulnerability. The ruby-find-library-file function is an interactive     function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-     command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may     cause commands to be executed. (CVE-2022-48338)

  - An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability.
    In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and     parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be     executed. (CVE-2022-48339)

  - emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a     crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is     fixed in 29.0.90 (CVE-2023-27985)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
235145	Photon OS 5.0: Emacs PHSA-2025-5.0-0512	Nessus	PhotonOS Local Security Checks	2025/5/5	2025/5/5	high
235450	Photon OS 4.0: Emacs PHSA-2025-4.0-0791	Nessus	PhotonOS Local Security Checks	2025/5/7	2025/5/7	high
235700	RHEL 9 : emacs (RHSA-2025:4787)	Nessus	Red Hat Local Security Checks	2025/5/12	2025/6/5	high
240483	Oracle Linux 9 : emacs (ELSA-2025-9448)	Nessus	Oracle Linux Local Security Checks	2025/6/25	2025/6/25	high
241824	EulerOS 2.0 SP10 : emacs (EulerOS-SA-2025-1794)	Nessus	Huawei Local Security Checks	2025/7/10	2025/7/10	high
242106	RHEL 8 : emacs (RHSA-2025:11030)	Nessus	Red Hat Local Security Checks	2025/7/15	2025/7/15	high
242447	EulerOS 2.0 SP12 : emacs (EulerOS-SA-2025-1817)	Nessus	Huawei Local Security Checks	2025/7/21	2025/7/21	high
240466	GLSA-202506-01 : Emacs: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2025/6/25	2025/6/25	high
216874	Debian dla-4069 : emacs - security update	Nessus	Debian Local Security Checks	2025/2/27	2025/2/27	high
268120	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2025-986127)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/10	high
242832	NewStart CGSL MAIN 7.02 : emacs Multiple Vulnerabilities (NS-SA-2025-0115)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	critical

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

critical