CVE-2024-53920
Fixed in a distro release EPSS <1%CVSS 7.8
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
Products: gnu emacs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | emacs | 1:26.1-15.el8_10 |
| AlmaLinux 8 | emacs-common | 1:26.1-15.el8_10 |
| AlmaLinux 8 | emacs-lucid | 1:26.1-15.el8_10 |
| AlmaLinux 8 | emacs-nox | 1:26.1-15.el8_10 |
| AlmaLinux 8 | emacs-terminal | 1:26.1-15.el8_10 |
| AlmaLinux 9 | emacs | 1:27.2-11.el9_5.2 |
| AlmaLinux 9 | emacs | 1:27.2-14.el9_6.2 |
| AlmaLinux 9 | emacs-common | 1:27.2-11.el9_5.2 |
| AlmaLinux 9 | emacs-common | 1:27.2-14.el9_6.2 |
| AlmaLinux 9 | emacs-filesystem | 1:27.2-11.el9_5.2 |
| AlmaLinux 9 | emacs-filesystem | 1:27.2-14.el9_6.2 |
| AlmaLinux 9 | emacs-lucid | 1:27.2-11.el9_5.2 |
| AlmaLinux 9 | emacs-lucid | 1:27.2-14.el9_6.2 |
| AlmaLinux 9 | emacs-nox | 1:27.2-14.el9_6.2 |
| AlmaLinux 9 | emacs-nox | 1:27.2-11.el9_5.2 |
| Amazon Linux 2 | emacs | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2 | emacs-common | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2 | emacs-devel | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2 | emacs-filesystem | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2 | emacs-lucid | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2 | emacs-nox | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2 | emacs-terminal | 1:27.2-4.amzn2.0.6 |
| Amazon Linux 2023 | emacs | 1:28.2-3.amzn2023.0.9 |
| Amazon Linux 2023 | emacs-common | 1:28.2-3.amzn2023.0.9 |
| Amazon Linux 2023 | emacs-devel | 1:28.2-3.amzn2023.0.9 |
| Amazon Linux 2023 | emacs-filesystem | 1:28.2-3.amzn2023.0.9 |
| Amazon Linux 2023 | emacs-lucid | 1:28.2-3.amzn2023.0.9 |
| Amazon Linux 2023 | emacs-nox | 1:28.2-3.amzn2023.0.9 |
| Amazon Linux 2023 | emacs-terminal | 1:28.2-3.amzn2023.0.9 |
| Debian 11 | emacs | 1:27.1+1-3.1+deb11u6 |
| Debian 12 | emacs | 1:28.2+1-15+deb12u4 |
| Debian 13 | emacs | 1:30.1+1-1 |
| Debian 14 | emacs | 1:30.1+1-1 |
| Red Hat Enterprise Linux 8 | emacs | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-common | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-common-debuginfo | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-debuginfo | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-debugsource | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-filesystem | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-lucid | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-lucid-debuginfo | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-nox | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-nox-debuginfo | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 8 | emacs-terminal | 1:26.1-15.el8_10 |
| Red Hat Enterprise Linux 9 | emacs | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-common | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-common | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-common-debuginfo | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-common-debuginfo | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-debuginfo | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-debuginfo | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-debugsource | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-debugsource | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-filesystem | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-filesystem | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-lucid | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-lucid | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-lucid-debuginfo | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-lucid-debuginfo | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-nox | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-nox | 1:27.2-14.el9_6.2 |
| Red Hat Enterprise Linux 9 | emacs-nox-debuginfo | 1:27.2-11.el9_5.2 |
| Red Hat Enterprise Linux 9 | emacs-nox-debuginfo | 1:27.2-14.el9_6.2 |
| Red Hat rhel eus 9.2 | emacs | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-common | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-common-debuginfo | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-debuginfo | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-debugsource | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-filesystem | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-lucid | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-lucid-debuginfo | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-nox | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.2 | emacs-nox-debuginfo | 1:27.2-8.el9_2.3 |
| Red Hat rhel eus 9.4 | emacs | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-common | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-common-debuginfo | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-debuginfo | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-debugsource | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-filesystem | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-lucid | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-lucid-debuginfo | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-nox | 1:27.2-10.el9_4.2 |
| Red Hat rhel eus 9.4 | emacs-nox-debuginfo | 1:27.2-10.el9_4.2 |
| Rocky Linux 8 | emacs | 1:26.1-15.el8_10 |
| Rocky Linux 9 | emacs | 1:27.2-11.el9_5.2 |
| Rocky Linux 9 | emacs | 1:27.2-14.el9_6.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP5 | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP6 | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP6 | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | emacs | 27.2-150400.3.20.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | emacs | 27.2-150400.3.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | emacs | 27.2-150400.3.26.1 |
| SUSE Manager Proxy 4.3 | emacs | 27.2-150400.3.20.2 |
| SUSE Manager Proxy 4.3 | emacs | 27.2-150400.3.26.1 |
| SUSE Manager Server 4.3 | emacs | 27.2-150400.3.20.2 |
| SUSE Manager Server 4.3 | emacs | 27.2-150400.3.26.1 |
| Ubuntu 16.04 LTS | xemacs21 | no fix |
| Ubuntu 16.04 LTS | xemacs21-packages | no fix |
| Ubuntu 18.04 LTS | xemacs21 | no fix |
| Ubuntu 18.04 LTS | xemacs21-packages | no fix |
| Ubuntu 20.04 LTS | xemacs21 | no fix |
| Ubuntu 20.04 LTS | xemacs21-packages | no fix |
| Ubuntu 22.04 LTS | xemacs21 | no fix |
| Ubuntu 22.04 LTS | xemacs21-packages | no fix |
| Ubuntu 24.04 LTS | xemacs21 | no fix |
| Ubuntu 24.04 LTS | xemacs21-packages | no fix |
| Ubuntu 25.10 | xemacs21 | no fix |
| Ubuntu 25.10 | xemacs21-packages | no fix |
| Ubuntu 26.04 LTS | xemacs21 | no fix |
| Ubuntu 26.04 LTS | xemacs21-packages | no fix |
| Ubuntu 26.10 | xemacs21 | no fix |
| Ubuntu 26.10 | xemacs21-packages | no fix |
| Ubuntu Pro 16.04 LTS | emacs24 | no fix |
| Ubuntu Pro 18.04 LTS | emacs25 | no fix |
| Ubuntu Pro 20.04 LTS | emacs | 1:26.3+1-1ubuntu2+esm2 |
| Ubuntu Pro 22.04 LTS | emacs | 1:27.1+1-3ubuntu5.2+esm1 |
| Ubuntu Pro 24.04 LTS | emacs | 1:29.3+1-1ubuntu2+esm3 |
| openSUSE Leap 15.5 | emacs | 27.2-150400.3.20.2 |
| openSUSE Leap 15.6 | emacs | 27.2-150400.3.26.1 |
| openSUSE Leap 15.6 | emacs | 27.2-150400.3.20.2 |
| openSUSE Tumbleweed | emacs | 29.4-11.1 |