Advisories » MGASA-2025-0075

Updated emacs packages fix a security vulnerability

Publication date: 25 Feb 2025
Modification date: 25 Feb 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-1244

Description

A command injection flaw was found which could allow a remote,
unauthenticated attacker to execute arbitrary shell commands by tricking
users into visiting a specially crafted website or an HTTP URL with a
redirect.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34045
• https://lwn.net/Articles/1011611/
• https://nvd.nist.gov/vuln/detail/CVE-2025-1244
• https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=820f0793f0b46448928905552726c1f1b999062f
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1244

SRPMS

9/core

• emacs-29.4-1.3.mga9