Debian/org-mode: high 7.8
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
Action: Upgrade org-mode to 9.5.2+dfsh-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.5.2+dfsh-5 | - |
Fixed versions
| 9.5.2+dfsh-5 |
Sources
- osv: DEBIAN-CVE-2023-28617#Debian:12/org-mode
- https://security-tracker.debian.org/tracker/CVE-2023-28617
published · modified · JSON