Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.1.13.2025.057.01
Categoría:Slackware Local Security Checks
Título:Slackware: Security Advisory (SSA:2025-057-01)
Resumen:The remote host is missing an update for the 'emacs' package(s) announced via the SSA:2025-057-01 advisory.
Descripción:Summary:
The remote host is missing an update for the 'emacs' package(s) announced via the SSA:2025-057-01 advisory.

Vulnerability Insight:
New emacs packages are available for Slackware 15.0 and -current to
fix security issues.


Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/emacs-30.1-i586-1_slack15.0.txz: Upgraded.
This update fixes two security issues:
Fix shell injection vulnerability in man.el (CVE-2025-1244).
New user option 'trusted-content' to allow potentially dangerous features.
This option lists those files and directories whose content Emacs should
consider as sufficiently trusted to run any part of the code contained
therein even without any explicit user request. For example, Flymake's
backend for Emacs Lisp consults this option and disables itself with an
'untrusted content' warning if the file is not listed.
Emacs Lisp authors should note that a major or minor mode must never set
this option to the ':all' value.
This option is used to fix CVE-2024-53920.
Thanks to pbslxw for the heads-up.
For more information, see:
[links moved to references]
(* Security fix *)
+--------------------------+

Affected Software/OS:
'emacs' package(s) on Slackware 15.0, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2024-53920
Common Vulnerability Exposure (CVE) ID: CVE-2025-1244
CopyrightCopyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.