Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-30202

Fixed in a distro release EPSS 1%CVSS 7.8

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

Published 2024-03-25 · CVE record · OSV

Products: gnu emacs, gnu org_mode

Distro releases

ReleasePackageFixed in
Amazon Linux 2023emacs1:28.2-3.amzn2023.0.7
Amazon Linux 2023emacs-common1:28.2-3.amzn2023.0.7
Amazon Linux 2023emacs-devel1:28.2-3.amzn2023.0.7
Amazon Linux 2023emacs-filesystem1:28.2-3.amzn2023.0.7
Amazon Linux 2023emacs-lucid1:28.2-3.amzn2023.0.7
Amazon Linux 2023emacs-nox1:28.2-3.amzn2023.0.7
Amazon Linux 2023emacs-terminal1:28.2-3.amzn2023.0.7
Debian 12emacs1:28.2+1-15+deb12u1
Debian 12org-modeno fix
Debian 13emacs1:29.3+1-1
Debian 13org-mode9.6.23+dfsg-1
Debian 14emacs1:29.3+1-1
Debian 14org-mode9.6.23+dfsg-1
Ubuntu 16.04 LTSxemacs21no fix
Ubuntu 16.04 LTSxemacs21-packagesno fix
Ubuntu 18.04 LTSxemacs21no fix
Ubuntu 18.04 LTSxemacs21-packagesno fix
Ubuntu 20.04 LTSxemacs21no fix
Ubuntu 20.04 LTSxemacs21-packagesno fix
Ubuntu 22.04 LTSxemacs21no fix
Ubuntu 22.04 LTSxemacs21-packagesno fix
Ubuntu 24.04 LTSxemacs21no fix
Ubuntu 24.04 LTSxemacs21-packagesno fix
Ubuntu 25.10xemacs21no fix
Ubuntu 25.10xemacs21-packagesno fix
Ubuntu 26.04 LTSxemacs21no fix
Ubuntu 26.04 LTSxemacs21-packagesno fix
Ubuntu 26.10xemacs21no fix
Ubuntu 26.10xemacs21-packagesno fix
Ubuntu Pro 16.04 LTSemacs24no fix
Ubuntu Pro 16.04 LTSorg-mode8.3.3-2ubuntu0.1~esm1
Ubuntu Pro 18.04 LTSemacs25no fix
Ubuntu Pro 18.04 LTSorg-mode9.1.6+dfsg-1ubuntu0.1~esm1
Ubuntu Pro 20.04 LTSorg-mode9.3.1+dfsg-1ubuntu0.1~esm1
Ubuntu Pro 22.04 LTSorg-mode9.5.2+dfsh-4ubuntu0.1~esm1
Ubuntu Pro 24.04 LTSorg-mode9.6.10+dfsg-1ubuntu0.1~esm1