BSD PortsEmacs -- Arbitrary code execution vulnerability
Problem Description A shell injection vulnerability exists in GNU Emacs due to improper handling of custom man URI schemes. Impact Initially considered low severity, as it required user interaction with local files, it was later discovered that an attacker could exploit this vulnerability by tricking a user into visiting a specially crafted website or an HTTP URL with a redirect, leading to arbitrary shell command …
Affected versions
- emacs, emacs-canna, emacs-nox, emacs-wayland < 30.1,3
- emacs-devel, emacs-devel-nox < 30.0.50.20240115,3
By system
0 still vulnerable, 4 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | editors/emacs | 30.1_2,3 | fixed | |
| OpenBSD | editors/emacs | 31.1-gtk3 | out of range, by version | |
| NetBSD | editors/emacs | 30.2 | not listed | |
| MidnightBSD | editors/emacs | 31.1_5,3 | out of range, by version | |
| FreeBSD | editors/emacs | 31.1_3,3 | fixed | (530 days after) |
| DragonFly | editors/emacs-devel | 31.0.50.20250315_1,3 | fixed | |
| MidnightBSD | editors/emacs-devel | 31.0.50.20250515_4,3 | out of range, by version | |
| FreeBSD | editors/emacs-devel | 32.0.50.20261019,3 | fixed | (496 days after) |