Emacs 25.3 Released To Fix A Security Vulnerability Of Malicious Lisp Scripts

Written by Michael Larabel in GNU on 11 September 2017 at 07:37 PM EDT. 10 Comments
GNU --
Emacs 25.3 is now available, but it doesn't offer major new features, rather it fixes a security vulnerability.

Emacs' x-display decoding feature within the Enriched Text mode could lead to executing arbitrary malicious Lisp code within the text.

This vulnerability has been present in Emacs since 1995 with Emacs 19.29.

Aside from upgrading to Emacs 25.3 to fend off malicious Lisp attacks, the Emacs user configuration file can also be changed to disable the exploitable functionality.

More details on info-gnu.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week