Ubuntu Security Notice 541-1 – Drake Wilson discovered that Emacs did not correctly handle the safe mode of “enable-local-variables”. If a user were tricked into opening a specially crafted file while “enable-local-variables” was set to the non-default “:safe”, a remote attacker could execute arbitrary commands with the user’s privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60890/USN-541-1.txt
Source: https://packetstormsecurity.com/files/60890/Ubuntu-Security-Notice-541-1.html