Org Mode vulnerability CVE-2023-28617 is fixed (1/2)
authorXi Lu <lx@shellcodes.org>
Sat, 11 Mar 2023 10:53:37 +0000 (18:53 +0800)
committerRob Browning <rlb@defaultvalue.org>
Sat, 13 May 2023 20:17:27 +0000 (21:17 +0100)
commitc7d0b4b2488683374a024bf88879d1f7b247e479
tree6e00894871d523d26707da6e2b16ac4be4260286
parent0713a1f8ebde9386ccda16264b1dfb5175296eab
Org Mode vulnerability CVE-2023-28617 is fixed (1/2)

https://security-tracker.debian.org/tracker/CVE-2023-28617

This upstream patch (1/2) has been incorporated to fix the problem:

  * lisp/ob-latex.el: Fix command injection vulnerability

  (org-babel-execute:latex):
  Replaced the `(shell-command "mv BAR NEWBAR")' with `rename-file'.

  TINYCHANGE

Origin: https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=a8006ea580ed74f27f974d60b598143b04ad1741
Bug-Debian: https://bugs.debian.org/1033342

Gbp-Pq: Name 0027-Org-Mode-vulnerability-CVE-2023-28617-is-fixed-1-2.patch
lisp/org/ob-latex.el