Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: 2023-0152 Moderate: Emacs Command Execution Issue

mageia
Calendar Grey April 24, 2023
Dist Mageia Esm H88
Recent updates to Emacs packages address a significant command execution vulnerability present in Org Mode for Mageia 8.
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell ...

Summary

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

References

- https://bugs.mageia.org/show_bug.cgi?id=31767

- https://ubuntu.com/security/notices/USN-6003-1

- https://www.cve.org/CVERecord?id=CVE-2023-28617

Topics%20covered

Topics Covered

security advisory moderate security issue command execution Emacs Mageia Org Mode

Resolution

SRPMS

- 8/core/emacs-27.1-1.4.mga8

Publication date: 24 Apr 2023
URL: https://advisories.mageia.org/MGASA-2023-0152.html
Type: security
CVE: CVE-2023-28617

Topics%20covered

Topics Covered

security advisory moderate security issue command execution Emacs Mageia Org Mode

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here