Nixpkgs security tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: emacs-macport

Found 1 matching suggestions

View:
Compact
Detailed
Published
Permalink CVE-2026-6861
6.1 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): Low (L)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): High (H)
updated 2 months ago by @ADMIN Activity log
  • Created suggestion 2 months ago
  • @LeSuisse ignored
    25 packages
    • qemacs
    • uemacs
    • emacs30
    • chemacs2
    • emacs-gtk
    • emacs-nox
    • emacspeak
    • emacs-pgtk
    • emacs30-nox
    • emacs30-gtk3
    • emacs30-pgtk
    • emacs-macport
    • emacs-anywhere
    • pinentry-emacs
    • emacs30-macport
    • emacs-lsp-booster
    • parinfer-rust-emacs
    • emacsclient-commands
    • emacs-all-the-icons-fonts
    • haskellPackages.emacs-module
    • haskellPackages.yi-keymap-emacs
    • haskellPackages.yi-emacs-colours
    • vscode-extensions.tuttieee.emacs-mcx
    • gnomeExtensions.emacs-search-provider
    • vscode-extensions.jamesyang999.vscode-emacs-minimum
    2 months ago
  • @LeSuisse accepted 2 months ago
  • @LeSuisse published on GitHub 2 months ago
  • @ADMIN restored package emacs-macport 2 months ago
Emacs: emacs: memory corruption vulnerability when processing svg css

A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.

References

Affected products

emacs

Matching in nixpkgs

pkgs.emacs

Extensible, customizable GNU text editor

  • nixos-unstable 30.2
    • nixpkgs-unstable 30.2
    • nixos-unstable-small 30.2
Ignored packages (24)

pkgs.qemacs

Very small but powerful UNIX editor

pkgs.emacs30

Extensible, customizable GNU text editor

  • nixos-unstable 30.2
    • nixpkgs-unstable 30.2
    • nixos-unstable-small 30.2

pkgs.emacs-nox

Extensible, customizable GNU text editor

  • nixos-unstable 30.2
    • nixpkgs-unstable 30.2
    • nixos-unstable-small 30.2

pkgs.emacspeak

Emacs extension that provides spoken output

  • nixos-unstable 59.0
    • nixpkgs-unstable 59.0
    • nixos-unstable-small 59.0

pkgs.emacs-pgtk

Extensible, customizable GNU text editor

  • nixos-unstable 30.2
    • nixpkgs-unstable 30.2
    • nixos-unstable-small 30.2

pkgs.emacs30-nox

Extensible, customizable GNU text editor

  • nixos-unstable 30.2
    • nixpkgs-unstable 30.2
    • nixos-unstable-small 30.2

pkgs.emacs30-pgtk

Extensible, customizable GNU text editor

  • nixos-unstable 30.2
    • nixpkgs-unstable 30.2
    • nixos-unstable-small 30.2 
Patch: https://cgit.git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-30&id=8f535370b9efbc91673b20c6987a5cae4f6dc562