emacs-orgmode
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH] Fix ob-latex.el command injection vulnerability.


From: lux
Subject: Re: [PATCH] Fix ob-latex.el command injection vulnerability.
Date: Mon, 06 Mar 2023 11:17:02 +0800
User-agent: Evolution 3.46.4 (3.46.4-1.fc37)

On Sat, 2023-02-18 at 11:43 +0000, Ihor Radchenko wrote:
> lux <lx@shellcodes.org> writes:
> 
> > -              (shell-command (format "mv %s %s" img-out out-
> > file)))))
> > +              (rename-file img-out out-file))))
> 
> I think should be (rename-file img-out out-file t)
> 

Fixed, thank you.

Attachment: 0001-lisp-ob-latex.el-org-babel-execute-latex-Fix-command.patch
Description: Text Data


reply via email to

[Prev in Thread] Current Thread [Next in Thread]