跳转到帖子

Debian: CVE-2023-27985: emacs -- security update

recommended_posts

发布于
  • Members

Debian: CVE-2023-27985: emacs -- security update

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
03/09/2023
Created
07/31/2024
Added
07/30/2024
Modified
01/28/2025

Description

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

Solution(s)

  • debian-upgrade-emacs

References

  • https://attackerkb.com/topics/cve-2023-27985
  • CVE - 2023-27985
  • 查看数 699
  • 已创建
  • 最后回复