emacs (SUSE:Linux Enterprise Module for Basesystem 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP5 package emacs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2024-39331 — CVSS 9.8 (critical): In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as…
• CVE-2024-53920 — CVSS 7.8 (high): In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs…
• CVE-2024-30205 — CVSS 7.1 (high): In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
• CVE-2024-30203 — CVSS 5.5 (medium): In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
• CVE-2024-30204 — CVSS 2.8 (low): In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.