1. 11
    Arbitrary code execution vulnerability fixed in Emacs 25.3 emacs security lists.gnu.org
    JordiGH avatar via JordiGH 11 months ago | cached | 5 comments

  1.  

  2. 3
    stsp avatar stsp 11 months ago | link

    More details here: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=28350

    1. 3
      runejuhl avatar runejuhl 11 months ago | link

      A snippet for your .emacs:

      (if (version< emacs-version "25.3")
    (eval-after-load "enriched"
      '(defun enriched-decode-display-prop (start end &optional param)
         (list start end))))
      1. 3
        itistoday avatar itistoday 11 months ago | link

        Emacs is probably the least secure operating system out there.

        1. 3
          apg avatar apg 11 months ago | link

          No joke! I love emacs, but a bug in its movemail routine is the star of The Cuckoo’s Egg, too! Maybe just don’t do mail from emacs….

          1. 1
            JordiGH avatar JordiGH 11 months ago | link

            Oh, man, I forgot about that. I should re-read that book. The first time I read it was about 20 years ago and I didn’t even know Unix back then.