[Git][security-tracker-team/security-tracker][master] CVE-2024-20203, CVE-2024-20204 affect Org-mode too -- same code

[Sean Whitton (@spwhitton)]

Sean Whitton pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50131006 by Sean Whitton at 2024-04-29T14:10:06+01:00
CVE-2024-20203, CVE-2024-20204 affect Org-mode too -- same code

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10696,6 +10696,9 @@ CVE-2024-30204 (In Emacs before 29.3, LaTeX preview is enabled by default for e-
 	- emacs 1:29.3+1-1 (bug #1067630)
 	[bookworm] - emacs <no-dsa> (Minor issue, will be fixed via point release)
 	[bullseye] - emacs <no-dsa> (Minor issue, will be fixed via point release)
+	- org-mode 9.6.23+dfsg-1 (bug #1067663)
+	[bookworm] - org-mode <ignored> (Produces only a dependency binary package)
+	[bullseye] - org-mode <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/03/24/1
 	NOTE: https://lists.gnu.org/archive/html/info-gnu/2024-03/msg00005.html
 	NOTE: https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c (emacs-29.3)
@@ -10705,6 +10708,9 @@ CVE-2024-30203 (In Emacs before 29.3, Gnus treats inline MIME contents as truste
 	- emacs 1:29.3+1-1 (bug #1067630)
 	[bookworm] - emacs <no-dsa> (Minor issue, will be fixed via point release)
 	[bullseye] - emacs <no-dsa> (Minor issue, will be fixed via point release)
+	- org-mode 9.6.23+dfsg-1 (bug #1067663)
+	[bookworm] - org-mode <ignored> (Produces only a dependency binary package)
+	[bullseye] - org-mode <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/03/24/1
 	NOTE: https://lists.gnu.org/archive/html/info-gnu/2024-03/msg00005.html
 	NOTE: https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b9042ad7426acdcca33e3d931d8f495bdd804 (emacs-29.3)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50131006a9159cb9bed10204a62de0e015810de2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50131006a9159cb9bed10204a62de0e015810de2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240429/d53b895d/attachment.htm>