Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 9: 2025-0075 critical: Emacs command injection risk

mageia
Calendar Grey February 25, 2025
Dist Mageia Esm H88
Recent updates to Emacs packages for Mageia address a significant command injection vulnerability, which could enable remote execution by malicious attackers.
A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a specially crafted webs...

Summary

A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

References

- https://bugs.mageia.org/show_bug.cgi?id=34045

- https://lwn.net/Articles/1011611/

- https://nvd.nist.gov/vuln/detail/CVE-2025-1244

-

- https://www.cve.org/CVERecord?id=CVE-2025-1244

Topics%20covered

Topics Covered

security advisory critical software update remote access remote execution command injection Emacs Mageia unauthenticated attacker

Resolution

SRPMS

- 9/core/emacs-29.4-1.3.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Feb 2025
URL: https://advisories.mageia.org/MGASA-2025-0075.html
Type: security
CVE: CVE-2025-1244

Topics%20covered

Topics Covered

security advisory critical software update remote access remote execution command injection Emacs Mageia unauthenticated attacker

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here