EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 22·5 min read
Emacs Arbitrary Code Execution Returns
TL;DR
A new arbitrary code execution vulnerability has been discovered in Emacs, specifically exploiting Emacs Lisp symbol shorthands introduced in version 28.1. This vulnerability allows malicious files to execute arbitrary code upon opening.
✦ Why It Matters
Review and update your Emacs installation to mitigate potential security risks from this vulnerability.
Key Takeaways
- Review and update your Emacs version to include the latest security fixes.
- Implement the provided configuration changes to mitigate the vulnerability.
- Consider using the trust-manager package for additional security.
- Stay informed about future updates and security releases for Emacs.
How It Works
The vulnerability exploits Emacs Lisp symbol shorthands, allowing malicious files to execute code immediately upon opening. This occurs before the file's contents are displayed, making it particularly dangerous.
The exploit does not depend on the file's name or extension, meaning any file can potentially carry the malicious code.