CVE-2023-28617
Fixed in a distro release EPSS <1%CVSS 7.8
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
Products: gnu org_mode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | emacs | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs | 1:26.1-7.el8_7.1 |
| AlmaLinux 8 | emacs-common | 1:26.1-7.el8_7.1 |
| AlmaLinux 8 | emacs-common | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-filesystem | 1:26.1-7.el8_7.1 |
| AlmaLinux 8 | emacs-filesystem | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-lucid | 1:26.1-7.el8_7.1 |
| AlmaLinux 8 | emacs-lucid | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-nox | 1:26.1-7.el8_7.1 |
| AlmaLinux 8 | emacs-nox | 1:26.1-10.el8_8.2 |
| AlmaLinux 8 | emacs-terminal | 1:26.1-7.el8_7.1 |
| AlmaLinux 8 | emacs-terminal | 1:26.1-10.el8_8.2 |
| AlmaLinux 9 | emacs | 1:27.2-6.el9_1.1 |
| AlmaLinux 9 | emacs | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-common | 1:27.2-6.el9_1.1 |
| AlmaLinux 9 | emacs-common | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-filesystem | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-filesystem | 1:27.2-6.el9_1.1 |
| AlmaLinux 9 | emacs-lucid | 1:27.2-6.el9_1.1 |
| AlmaLinux 9 | emacs-lucid | 1:27.2-8.el9_2.1 |
| AlmaLinux 9 | emacs-nox | 1:27.2-6.el9_1.1 |
| AlmaLinux 9 | emacs-nox | 1:27.2-8.el9_2.1 |
| Amazon Linux 2 | emacs | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2 | emacs-common | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2 | emacs-devel | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2 | emacs-filesystem | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2 | emacs-lucid | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2 | emacs-nox | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2 | emacs-terminal | 1:27.2-4.amzn2.0.4 |
| Amazon Linux 2023 | emacs | 1:28.2-3.amzn2023.0.5 |
| Amazon Linux 2023 | emacs-common | 1:28.2-3.amzn2023.0.5 |
| Amazon Linux 2023 | emacs-devel | 1:28.2-3.amzn2023.0.5 |
| Amazon Linux 2023 | emacs-filesystem | 1:28.2-3.amzn2023.0.5 |
| Amazon Linux 2023 | emacs-lucid | 1:28.2-3.amzn2023.0.5 |
| Amazon Linux 2023 | emacs-nox | 1:28.2-3.amzn2023.0.5 |
| Amazon Linux 2023 | emacs-terminal | 1:28.2-3.amzn2023.0.5 |
| Debian 10 | emacs | 1:26.1+1-3.2+deb10u4 |
| Debian 10 | org-mode | 9.1.14+dfsg-3+deb10u1 |
| Debian 11 | emacs | 1:27.1+1-3.1+deb11u6 |
| Debian 12 | emacs | 1:28.2+1-14 |
| Debian 12 | org-mode | 9.5.2+dfsh-5 |
| Debian 13 | emacs | 1:28.2+1-14 |
| Debian 13 | org-mode | 9.5.2+dfsh-5 |
| Debian 14 | emacs | 1:28.2+1-14 |
| Debian 14 | org-mode | 9.5.2+dfsh-5 |
| Red Hat Enterprise Linux 8 | emacs | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-common | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-common-debuginfo | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-debuginfo | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-debugsource | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-filesystem | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-lucid | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-lucid-debuginfo | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-nox | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-nox-debuginfo | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 8 | emacs-terminal | 1:26.1-7.el8_7.1 |
| Red Hat Enterprise Linux 9 | emacs | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-common | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-common-debuginfo | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-debuginfo | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-debugsource | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-filesystem | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-lucid | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-lucid-debuginfo | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-nox | 1:27.2-6.el9_1.1 |
| Red Hat Enterprise Linux 9 | emacs-nox-debuginfo | 1:27.2-6.el9_1.1 |
| Red Hat rhel aus 8.2 | emacs | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-common | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-common-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-debugsource | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-filesystem | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-lucid | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-lucid-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-nox | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-nox-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel aus 8.2 | emacs-terminal | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.1 | emacs | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-common | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-common-debuginfo | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-debuginfo | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-debugsource | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-filesystem | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-lucid | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-lucid-debuginfo | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-nox | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-nox-debuginfo | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.1 | emacs-terminal | 1:26.1-5.el8_1.1 |
| Red Hat rhel e4s 8.2 | emacs | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-common | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-common-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-debugsource | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-filesystem | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-lucid | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-lucid-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-nox | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-nox-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel e4s 8.2 | emacs-terminal | 1:26.1-5.el8_2.1 |
| Red Hat rhel eus 8.4 | emacs | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-common | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-common-debuginfo | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-debuginfo | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-debugsource | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-filesystem | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-lucid | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-lucid-debuginfo | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-nox | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-nox-debuginfo | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.4 | emacs-terminal | 1:26.1-5.el8_4.1 |
| Red Hat rhel eus 8.6 | emacs | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-common | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-common-debuginfo | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-debuginfo | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-debugsource | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-filesystem | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-lucid | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-lucid-debuginfo | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-nox | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-nox-debuginfo | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 8.6 | emacs-terminal | 1:26.1-7.el8_6.1 |
| Red Hat rhel eus 9.0 | emacs | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-common | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-common-debuginfo | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-debuginfo | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-debugsource | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-filesystem | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-lucid | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-lucid-debuginfo | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-nox | 1:27.2-6.el9_0.1 |
| Red Hat rhel eus 9.0 | emacs-nox-debuginfo | 1:27.2-6.el9_0.1 |
| Red Hat rhel tus 8.2 | emacs | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-common | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-common-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-debugsource | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-filesystem | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-lucid | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-lucid-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-nox | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-nox-debuginfo | 1:26.1-5.el8_2.1 |
| Red Hat rhel tus 8.2 | emacs-terminal | 1:26.1-5.el8_2.1 |
| Rocky Linux 8 | emacs | 1:26.1-7.el8_7.1 |
| Rocky Linux 9 | emacs | 1:27.2-6.el9_1.1 |
| Ubuntu 16.04 LTS | xemacs21 | no fix |
| Ubuntu 16.04 LTS | xemacs21-packages | no fix |
| Ubuntu 18.04 LTS | xemacs21 | no fix |
| Ubuntu 18.04 LTS | xemacs21-packages | no fix |
| Ubuntu 20.04 LTS | xemacs21 | no fix |
| Ubuntu 20.04 LTS | xemacs21-packages | no fix |
| Ubuntu 22.04 LTS | emacs | 1:27.1+1-3ubuntu5.2 |
| Ubuntu 22.04 LTS | xemacs21 | no fix |
| Ubuntu 22.04 LTS | xemacs21-packages | no fix |
| Ubuntu 24.04 LTS | xemacs21 | no fix |
| Ubuntu 24.04 LTS | xemacs21-packages | no fix |
| Ubuntu 25.10 | xemacs21 | no fix |
| Ubuntu 25.10 | xemacs21-packages | no fix |
| Ubuntu 26.04 LTS | xemacs21 | no fix |
| Ubuntu 26.04 LTS | xemacs21-packages | no fix |
| Ubuntu 26.10 | xemacs21 | no fix |
| Ubuntu 26.10 | xemacs21-packages | no fix |
| Ubuntu Pro 16.04 LTS | emacs24 | 24.5+1-6ubuntu1.1+esm4 |
| Ubuntu Pro 16.04 LTS | emacs24 | 24.5+1-6ubuntu1.1+esm3 |
| Ubuntu Pro 16.04 LTS | org-mode | 8.3.3-2ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | emacs25 | 25.2+1-6ubuntu0.1~esm2 |
| Ubuntu Pro 18.04 LTS | org-mode | 9.1.6+dfsg-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | emacs | 1:26.3+1-1ubuntu2+esm1 |
| Ubuntu Pro 20.04 LTS | org-mode | 9.3.1+dfsg-1ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | org-mode | 9.5.2+dfsh-4ubuntu0.1~esm1 |
| Ubuntu Pro 24.04 LTS | emacs | 1:29.3+1-1ubuntu2+esm1 |
| Ubuntu Pro 24.04 LTS | org-mode | 9.6.10+dfsg-1ubuntu0.1~esm1 |