Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1148723

Bug#1033341: org-mode: CVE-2023-28617

From David Bremner <david@tethera.net>
Newsgroups linux.debian.bugs.dist, linux.debian.maint.emacsen
Subject Bug#1033341: org-mode: CVE-2023-28617
Date 2023-06-04 13:50 +0200
Message-ID <GCUpb-dB5l-1@gated-at.bofh.it> (permalink)
References <Gcevg-env1-3@gated-at.bofh.it> <Gcevg-env1-3@gated-at.bofh.it> <GCLlT-duIa-1@gated-at.bofh.it> <Gcevg-env1-3@gated-at.bofh.it> <GCLlT-duIa-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Nicholas D Steeves <sten@debian.org> writes:

> fixed 1033341 org/mode/9.5.2+dfsh-5
> fixed 1033341 org-mode/9.6.6+dfsg-1~exp1
> thanks

Are you sure about that? It depends on emacs 28.2, which afaik has the
vulnerable org-mode embedded. I guess it's a question of interpretation,
but the vulnerability is still there after installing the package.

d

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1033341: org-mode: CVE-2023-28617 Salvatore Bonaccorso <carnil@debian.org> - 2023-03-22 22:50 +0100
  Bug#1033341: org-mode: CVE-2023-28617 Nicholas D Steeves <sten@debian.org> - 2023-06-04 04:10 +0200
    Bug#1033341: org-mode: CVE-2023-28617 Salvatore Bonaccorso <carnil@debian.org> - 2023-06-04 07:40 +0200
    Bug#1033341: org-mode: CVE-2023-28617 David Bremner <david@tethera.net> - 2023-06-04 13:50 +0200
      Bug#1033341: org-mode: CVE-2023-28617 Salvatore Bonaccorso <carnil@debian.org> - 2023-06-04 14:40 +0200
        Bug#1033341: org-mode: CVE-2023-28617 David Bremner <david@tethera.net> - 2023-06-04 21:10 +0200
      Bug#1033341: org-mode: CVE-2023-28617 Nicholas D Steeves <sten@debian.org> - 2023-06-13 02:00 +0200

csiph-web