vulnerability

FreeBSD: VID-f661184a-eb90-11ee-92fc-1c697a616631 (CVE-2024-30202): emacs -- multiple vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Mar 26, 2024
Added
Dec 10, 2025
Modified
Dec 10, 2025

Description

GNU Emacs developers report: Emacs 29.3 is an emergency bugfix release intended to fix several security vulnerabilities. Arbitrary Lisp code is no longer evaluated as part of turning on Org mode. This is for security reasons, to avoid evaluating malicious Lisp code. New buffer-local variable 'untrusted-content'. When this is non-nil, Lisp programs should treat buffer contents with extra caution. Gnus now treats inline MIME contents as untrusted. To get back previous insecure behavior, 'untrusted-content' should be reset to nil in the buffer. LaTeX preview is now by default disabled for email attachments. To get back previous insecure behavior, set the variable 'org--latex-preview-when-risky' to a non-nil value. Org mode now considers contents of remote files to be untrusted. Remote files are recognized by calling 'file-remote-p'.

Solutions

freebsd-upgrade-package-emacsfreebsd-upgrade-package-emacs-cannafreebsd-upgrade-package-emacs-nox
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.