Article 6T0QW [$] Emacs code completion can cause compromise

[$] Emacs code completion can cause compromise

by
daroc
from LWN.net on (#6T0QW)

Emacs has had afew bugs related to accidentallypermitting the execution of untrusted code. Unfortunately, it seems as thoughanother bug of that sort has appeared - and may be harder to patch,because the problem comes from the way Emacs handles expansion of Lisp macros incode being analyzed. Thevulnerability is only practically exploitable in a non-default configuration, sonot every Emacs user has something to worry about. The Emacsdevelopers are reportedly working on a fix, but have not yet shared detailsabout it. In the meantime, every Emacs version since at least26.1 (released in May2018) through the current development version is vulnerable.

External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments