{"id":"CVE-2024-30205","aliases":["ALSA-2024:6987","AZL-37080","AZL-37107","CLSA-2026-1787211247","CLSA-2026-1787212961","CLSA-2026-1787213200","DEBIAN-CVE-2024-30205","DLA-3801-1","DLA-3802-1","EUVD-2024-28137","GHSA-vxx9-qwhq-hgf4","MGASA-2024-0104","OESA-2024-1390","RHSA-2024:6987","RHSA-2024:9302","RLSA-2024:6987","RLSA-2024:9302","SUSE-SU-2024:1294-1","SUSE-SU-2024:1317-1","SUSE-SU-2024:2297-1","UBUNTU-CVE-2024-30205","USN-7027-1","USN-7375-1"],"status":"published","title":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00482,"percentile":0.41868,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-494"],"published":"2024-03-25T00:00:00Z","modified":"2026-11-02T12:02:16Z","fixes":[{"ecosystem":"Azure Linux:2","package":"emacs","fixed_in":["29.3-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"emacs","fixed_in":["29.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs-common","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs-el","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs-filesystem","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs-nox","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs-terminal","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"emacs","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"emacs-common","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"emacs-el","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"emacs-filesystem","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"emacs-nox","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"emacs-terminal","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"emacs","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"emacs-common","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"emacs-el","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"emacs-filesystem","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"emacs-nox","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"emacs-terminal","fixed_in":["1:24.3-23.0.1.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"emacs","fixed_in":["1:28.2+1-15+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"emacs","fixed_in":["1:29.3+1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"emacs","fixed_in":["1:29.3+1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"org-mode","fixed_in":["9.6.23+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"org-mode","fixed_in":["9.6.23+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"emacs24","fixed_in":["24.5+1-6ubuntu1.1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"emacs25","fixed_in":["25.2+1-6ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"org-mode","fixed_in":["9.1.6+dfsg-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"emacs","fixed_in":["1:26.3+1-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"org-mode","fixed_in":["9.3.1+dfsg-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"emacs","fixed_in":["1:27.1+1-3ubuntu5.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"org-mode","fixed_in":["9.5.2+dfsh-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"org-mode","fixed_in":["9.6.10+dfsg-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.0.1.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:28.2+1-15+deb12u1"}]}],"versions":["1:28.2+1-15"]},{"source":"osv","ecosystem":"Debian:13","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.3+1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.3+1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.5.2+dfsh-5","9.6.10+dfsg-1","9.6.21+dfsg-1","9.6.23+dfsg-1","9.6.28+dfsg-1","9.6.6+dfsg-1~exp1","9.6.7+dfsg-1","9.6.8+dfsg-1","9.6.9+dfsg-1","9.7.11+dfsg-1","9.7.13+dfsg-1","9.7.15+dfsg-1","9.7.16+dfsg-1","9.7.19+dfsg-1","9.7.25+dfsg-1","9.7.27+dfsg-1","9.7.29+dfsg-1","9.7.34+dfsg-1","9.7.36+dfsg-1","9.7.5+dfsg-1","9.7.6+dfsg-1","9.7.6+dfsg-2","9.8.10+dfsg-1","9.8.12+dfsg-1","9.8.2+dfsg-1","9.8.3+dfsg-1","9.8.4+dfsg-1","9.8.6+dfsg-1","9.8.7+dfsg-1","9.8.9+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.23+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.23+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1+1-3.2+deb10u5"}]}],"versions":["1:26.1+1-3.2","1:26.1+1-3.2+deb10u1","1:26.1+1-3.2+deb10u2","1:26.1+1-3.2+deb10u3","1:26.1+1-3.2+deb10u4"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.14+dfsg-3+deb10u2"}]}],"versions":["9.1.14+dfsg-3","9.1.14+dfsg-3+deb10u1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.2-10.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1-13.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1-13.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-13.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-13.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-13.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-13.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-lucid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-nox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-lucid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-nox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-12.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-10.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.3-25.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.3-25.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-150000.3.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"emacs24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.5+1-6ubuntu1.1+esm4"}]}],"versions":["24.5+1-1ubuntu2","24.5+1-1ubuntu4","24.5+1-1ubuntu5","24.5+1-1ubuntu6","24.5+1-1ubuntu7","24.5+1-6ubuntu1","24.5+1-6ubuntu1.1","24.5+1-6ubuntu1.1+esm1","24.5+1-6ubuntu1.1+esm2","24.5+1-6ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.22-4ubuntu3","21.4.22-14ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"emacs25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2+1-6ubuntu0.1~esm2"}]}],"versions":["25.2+1-6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.6+dfsg-1ubuntu0.1~esm1"}]}],"versions":["9.0.9+dfsg-3","9.1.2+dfsg-2","9.1.5+dfsg-1","9.1.6+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-4ubuntu1","21.4.24-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.3+1-1ubuntu2+esm1"}]}],"versions":["1:26.3+1-1ubuntu1","1:26.3+1-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.1+dfsg-1ubuntu0.1~esm1"}]}],"versions":["9.2.3+dfsg-1","9.3+dfsg-1","9.3+dfsg-2","9.3.1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-8build1","21.4.24-9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4","2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.1+1-3ubuntu5.2"}]}],"versions":["1:27.1+1-3ubuntu3","1:27.1+1-3ubuntu5","1:27.1+1-3ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-9ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.2+dfsh-4ubuntu0.1~esm1"}]}],"versions":["9.4.0+dfsg-1","9.5.2+dfsh-1","9.5.2+dfsh-2","9.5.2+dfsh-3","9.5.2+dfsh-4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12","21.4.24-12build2","21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-2","2009.02.17.dfsg.3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.10+dfsg-1ubuntu0.1~esm1"}]}],"versions":["9.6.7+dfsg-1","9.6.10+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3","2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"emacs24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.5+1-6ubuntu1.1+esm4"}]}],"versions":["24.5+1-1ubuntu2","24.5+1-1ubuntu4","24.5+1-1ubuntu5","24.5+1-1ubuntu6","24.5+1-1ubuntu7","24.5+1-6ubuntu1","24.5+1-6ubuntu1.1","24.5+1-6ubuntu1.1+esm1","24.5+1-6ubuntu1.1+esm2","24.5+1-6ubuntu1.1+esm3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"emacs25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2+1-6ubuntu0.1~esm2"}]}],"versions":["25.2+1-6"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.3+1-1ubuntu2+esm1"}]}],"versions":["1:26.3+1-1ubuntu1","1:26.3+1-1ubuntu2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.1+1-3ubuntu5.2"}]}],"versions":["1:27.1+1-3ubuntu3","1:27.1+1-3ubuntu5","1:27.1+1-3ubuntu5.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.3+1-1ubuntu2+esm1"}]}],"versions":["1:29.1+1-5ubuntu1","1:29.2+1-1ubuntu1","1:29.2+1-2ubuntu4","1:29.3+1-1ubuntu2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.3-2ubuntu0.1~esm1"}]}],"versions":["8.2.10-1","8.3.1-2","8.3.2-1","8.3.3-1","8.3.3-2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.6+dfsg-1ubuntu0.1~esm1"}]}],"versions":["9.0.9+dfsg-3","9.1.2+dfsg-2","9.1.5+dfsg-1","9.1.6+dfsg-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.1+dfsg-1ubuntu0.1~esm1"}]}],"versions":["9.2.3+dfsg-1","9.3+dfsg-1","9.3+dfsg-2","9.3.1+dfsg-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.2+dfsh-4ubuntu0.1~esm1"}]}],"versions":["9.4.0+dfsg-1","9.5.2+dfsh-1","9.5.2+dfsh-2","9.5.2+dfsh-3","9.5.2+dfsh-4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"org-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.10+dfsg-1ubuntu0.1~esm1"}]}],"versions":["9.6.7+dfsg-1","9.6.10+dfsg-1"],"bundled":4}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"emacs"},{"vendor":"gnu","product":"org_mode"}],"references":[{"url":"https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29","tags":["x_transferred","Release Notes","web","report"]},{"url":"https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514d","tags":["x_transferred","Patch","web","report"]},{"url":"https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29\u0026id=2bc865ace050ff118db43f01457f95f95112b877","tags":["x_transferred","Patch","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/25/2","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30205","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-vxx9-qwhq-hgf4"},{"url":"https://access.redhat.com/errata/RHSA-2024:6987","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-30203","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-30205","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-39331","tags":["report"]},{"url":"https://bugzilla.redhat.com/2280296","tags":["report"]},{"url":"https://bugzilla.redhat.com/2280298","tags":["report"]},{"url":"https://bugzilla.redhat.com/2293942","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-6987.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1787211247.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1787212961.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39331","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1787213200.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/30xxx/CVE-2024-30205.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-30205","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0104.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33019","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/03/24/1","tags":["web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/03/25/2","tags":["web","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30204","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293942","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6987.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-30203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30203","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-30205","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-39331","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2024/06/23/1","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9302","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280297","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9302.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-30204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-30204","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:6987","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9302","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222050","tags":["report"]},{"url":"https://bugzilla.suse.com/1222052","tags":["report"]},{"url":"https://bugzilla.suse.com/1222053","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-30203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-30204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-30205","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241317-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242297-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226957","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39331","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-30205","tags":["report"]},{"url":"https://lists.gnu.org/archive/html/info-gnu/2024-03/msg00005.html","tags":["report"]},{"url":"https://list.orgmode.org/87o7b3eczr.fsf@bzg.fr/T/#t","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7027-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7375-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-45939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-30203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-30204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-39331","tags":["report"]},{"url":"https://launchpad.net/bugs/2070418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-30202","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-30205","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T00:00:00Z","modified":"2024-12-03T16:41:24.224Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-494"],"updated_at":"2026-11-02T14:34:07.831255Z"}],"euvd":[{"id":"EUVD-2024-28137","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T00:00:00Z","modified":"2024-12-03T16:41:24Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:42.176683Z"}],"ghsa":[{"id":"GHSA-vxx9-qwhq-hgf4","title":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T15:30:43Z","modified":"2024-12-03T18:32:04Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-494"],"updated_at":"2026-11-02T14:59:02.175785Z"}],"nvd":[{"id":"CVE-2024-30205","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T15:15:52.567Z","modified":"2026-06-17T07:26:29.147Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-494"],"updated_at":"2026-11-02T14:09:43.052376Z"}],"osv":[{"id":"CVE-2024-30205","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T00:00:00Z","modified":"2026-11-10T02:30:47.299499998Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T02:45:42.584685Z"},{"id":"DEBIAN-CVE-2024-30205","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T15:15:52.567Z","modified":"2026-11-02T12:02:16.234754531Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"OESA-2024-1390","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.(CVE-2024-30204)\r\n\r\nIn Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.(CVE-2024-30205)","status":"published","published":"2024-04-12T11:06:50Z","modified":"2026-08-18T01:18:20.76703358Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2024:6987","title":"Red Hat Security Advisory: emacs security update","status":"published","published":"2024-09-24T09:22:29Z","modified":"2026-09-23T10:03:12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9302","title":"Red Hat Security Advisory: emacs security update","status":"published","published":"2024-11-12T18:05:13Z","modified":"2026-03-18T11:36:23.623539Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RLSA-2024:6987","title":"Moderate: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203)\n\n* emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205)\n\n* emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:06.995407Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2024-30205","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T15:15:00Z","modified":"2026-10-17T12:56:44.455089805Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"ALSA-2024:6987","title":"Moderate: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203)\n* emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205)\n* emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-09-24T00:00:00Z","modified":"2026-10-29T11:02:21.717949689Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-37080","title":"CVE-2024-30205 affecting package emacs for versions less than 29.3-1","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T15:15:52Z","modified":"2026-04-21T04:28:09.33586Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-37107","title":"CVE-2024-30205 affecting package emacs for versions less than 29.3-1","description":"In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.","status":"published","published":"2024-03-25T15:15:52Z","modified":"2026-04-21T04:54:51.203957Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CLSA-2026-1787211247","title":"emacs: Fix of CVE-2024-30205","description":"- CVE-2024-30205: org-file-contents: consider all remote files unsafe","status":"published","published":"2026-08-22T10:34:48Z","modified":"2026-10-26T09:31:42.699492571Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787212961","title":"emacs: Fix of 2 CVEs","description":"- CVE-2024-30205: org-file-contents: consider all remote files unsafe","status":"published","published":"2026-10-06T15:25:28Z","modified":"2026-10-26T09:31:58.471081157Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787213200","title":"emacs: Fix of 2 CVEs","description":"- CVE-2024-30205: org-file-contents: consider all remote files unsafe","status":"published","published":"2026-10-06T15:27:28Z","modified":"2026-10-26T09:31:46.148509032Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"DLA-3801-1","title":"emacs - security update","status":"published","published":"2024-04-29T00:00:00Z","modified":"2026-03-09T01:21:04.44269Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-3802-1","title":"org-mode - security update","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-03-09T01:17:59.901856Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0104","title":"Updated emacs packages fix security vulnerabilities","description":"In Emacs before 29.3, arbitrary Lisp code is evaluated as part of\nturning on Org mode. This affects Org Mode before 9.6.23.\n(CVE-2024-30202)\nIn Emacs before 29.3, Gnus treats inline MIME contents as trusted.\n(CVE-2024-30203)\nIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail\nattachments. (CVE-2024-30204)\nIn Emacs before 29.3, Org mode considers contents of remote files to be\ntrusted. This affects Org Mode before 9.6.23. (CVE-2024-30205)\n","status":"published","published":"2024-03-31T03:27:58Z","modified":"2026-04-16T04:44:31.202880263Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"RLSA-2024:9302","title":"Moderate: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203)\n\n* emacs: LaTeX preview is enabled by default for e-mail attachments (CVE-2024-30204)\n\n* emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2024-11-19T16:02:24.506028Z","modified":"2026-02-05T13:45:15.984342Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:1294-1","title":"Security update for emacs","description":"This update for emacs fixes the following issues:\n\n- CVE-2024-30203: Fixed treating inline MIME contents as trusted (bsc#1222053)\n- CVE-2024-30204: Fixed LaTeX preview enabled by default for e-mail attachments (bsc#1222052)\n- CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted (bsc#1222050)\n","status":"published","published":"2024-04-15T16:37:08Z","modified":"2026-02-04T04:32:00.80902Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1317-1","title":"Security update for emacs","description":"This update for emacs fixes the following issues:\n\n- CVE-2024-30203: Fixed denial of service via MIME contents (bsc#1222053)\n- CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments (bsc#1222052)\n- CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted (bsc#1222050)\n","status":"published","published":"2024-04-16T15:09:36Z","modified":"2026-02-04T04:13:38.764456Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2297-1","title":"Security update for emacs","description":"This update for emacs fixes the following issues:\n\n- CVE-2024-30203: Fixed denial of service via MIME contents (bsc#1222053).\n- CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments (bsc#1222052).\n- CVE-2024-30204: Fixed Org mode considers contents of remote files to be trusted (bsc#1222050).\n- CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957).\n","status":"published","published":"2024-07-04T05:10:54Z","modified":"2026-02-04T02:55:24.304157Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-7027-1","title":"emacs, emacs24, emacs25 vulnerabilities","description":"It was discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04\nLTS. (CVE-2022-45939)\n\nXi Lu discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS\nand Ubuntu 22.04 LTS. (CVE-2022-48337)\n\nXi Lu discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 22.04 LTS. (CVE-2022-48338)\n\nXi Lu discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04\nLTS. (CVE-2022-48339)\n\nIt was discovered that Emacs incorrectly handled filename sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04\nLTS. (CVE-2023-28617)\n\nIt was discovered that Emacs incorrectly handled certain crafted files. An\nattacker could possibly use this issue to crash the program, resulting in\na denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-30203,\nCVE-2024-30204, CVE-2024-30205)\n\nIt was discovered that Emacs incorrectly handled certain crafted files. An\nattacker could possibly use this issue to execute arbitrary commands.\n(CVE-2024-39331)\n","status":"published","published":"2024-09-19T17:16:05Z","modified":"2026-06-25T13:32:29.065193892Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7375-1","title":"org-mode vulnerabilities","description":"It was discovered that Org Mode did not correctly handle filenames\ncontaining shell metacharacters. An attacker could possibly use this issue\nto cause a denial of service or execute arbitrary code. This issue only\naffected Ubuntu 22.04 LTS. (CVE-2023-28617)\n\nIt was discovered that Org Mode could run untrusted code left in its\nbuffer. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-30202)\n\nIt was discovered that Org Mode did not correctly handle the contents of\nremote files. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\n(CVE-2024-30205)\n\nIt was discovered that Org Mode could be made to run arbitrary Elisp code.\nAn attacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2024-39331)\n","status":"published","published":"2025-03-27T00:41:50Z","modified":"2026-06-25T13:32:30.274844964Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}