Test ID:	1.3.6.1.4.1.25623.1.1.10.2024.0276
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2024-0276)
Summary:	The remote host is missing an update for the 'emacs' package(s) announced via the MGASA-2024-0276 advisory.
Description:	Summary: The remote host is missing an update for the 'emacs' package(s) announced via the MGASA-2024-0276 advisory. Vulnerability Insight: In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. (CVE-2024-39331) Affected Software/OS: 'emacs' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-39331 https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 https://list.orgmode.org/87sex5gdqc.fsf@localhost/ https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html https://news.ycombinator.com/item?id=40768225 https://www.openwall.com/lists/oss-security/2024/06/23/1 https://www.openwall.com/lists/oss-security/2024/06/23/2
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.