HCE3-SA-2025-0025 Important HCE 3.0 Security Fix(es): In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.) (CVE-2024-53920) A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244) HCE 3.0 emacs-29.1-4.r1.hce3.x86_64.rpm emacs-common-29.1-4.r1.hce3.x86_64.rpm emacs-devel-29.1-4.r1.hce3.x86_64.rpm emacs-filesystem-29.1-4.r1.hce3.noarch.rpm emacs-help-29.1-4.r1.hce3.noarch.rpm emacs-nox-29.1-4.r1.hce3.x86_64.rpm emacs-terminal-29.1-4.r1.hce3.noarch.rpm emacs-29.1-4.r1.hce3.aarch64.rpm emacs-common-29.1-4.r1.hce3.aarch64.rpm emacs-devel-29.1-4.r1.hce3.aarch64.rpm emacs-nox-29.1-4.r1.hce3.aarch64.rpm