Skip to content
OpenAdvisories
High · 7.8 CVE-2023-28617 EUVD-2023-32285GHSA-xwfh-qqww-gr22

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file na…

Published Mar 19, 2023 · Updated Nov 3, 2025 · Assigned by mitre

Package: emacs Package: emacs Package: emacs Package: emacs24 Package: emacs25 Package: org-mode Package: org-mode Package: xemacs21 Package: xemacs21-packages Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 emacs 1:28.2+1-14 —
Debian 14 org-mode 9.5.2+dfsh-5 —
Debian 13 emacs 1:28.2+1-14 —
Debian 13 org-mode 9.5.2+dfsh-5 —
Debian 12 emacs 1:28.2+1-14 —
Debian 12 org-mode 9.5.2+dfsh-5 —
Debian 11 emacs 1:27.1+1-3.1+deb11u6 DLA-4069-1
Debian 10 emacs 1:26.1+1-3.2+deb10u4 DLA-3416-1
Debian 10 org-mode 9.1.14+dfsg-3+deb10u1 DLA-3616-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 xemacs21 +1 No fix yet —
Ubuntu 26.04 LTS xemacs21 +1 No fix yet —
Ubuntu 25.10 xemacs21 +1 No fix yet —
Ubuntu 24.04 LTS xemacs21 +1 No fix yet —
Ubuntu 22.04 LTS emacs 1:27.1+1-3ubuntu5.2 USN-7027-1
Ubuntu 22.04 LTS xemacs21 +1 No fix yet —
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS xemacs21 +1 No fix yet —
Ubuntu 18.04 LTS xemacs21 +1 No fix yet —
Ubuntu 16.04 LTS xemacs21 +1 No fix yet —
Ubuntu Pro 24.04 LTS emacs 1:29.3+1-1ubuntu2+esm1 USN-7027-1
Ubuntu Pro 24.04 LTS org-mode 9.6.10+dfsg-1ubuntu0.1~esm1 USN-7375-1
Ubuntu Pro 22.04 LTS org-mode 9.5.2+dfsh-4ubuntu0.1~esm1 USN-7375-1
Ubuntu Pro 20.04 LTS emacs 1:26.3+1-1ubuntu2+esm1 USN-7027-1
Ubuntu Pro 20.04 LTS org-mode 9.3.1+dfsg-1ubuntu0.1~esm1 USN-7375-1
Ubuntu Pro 18.04 LTS emacs25 25.2+1-6ubuntu0.1~esm2 USN-7027-1
Ubuntu Pro 18.04 LTS org-mode 9.1.6+dfsg-1ubuntu0.1~esm1 USN-7375-1
Ubuntu Pro 16.04 LTS emacs24 24.5+1-6ubuntu1.1+esm3 USN-7027-1, USN-6003-1
Ubuntu Pro 16.04 LTS org-mode 8.3.3-2ubuntu0.1~esm1 USN-7375-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 emacs +4 1:27.2-6.el9_1.1 RHSA-2023:2074
RHEL 8 emacs +5 1:26.1-7.el8_7.1 RHSA-2023:1930
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.0 EUS emacs +4 1:27.2-6.el9_0.1 RHSA-2023:2010
RHEL 8.6 EUS emacs +5 1:26.1-7.el8_6.1 RHSA-2023:1931
RHEL 8.4 EUS emacs +5 1:26.1-5.el8_4.1 RHSA-2023:1958
RHEL 8.2 TUS emacs +5 1:26.1-5.el8_2.1 RHSA-2023:1915
RHEL 8.2 E4S emacs +5 1:26.1-5.el8_2.1 RHSA-2023:1915
RHEL 8.2 AUS emacs +5 1:26.1-5.el8_2.1 RHSA-2023:1915
RHEL 8.1 E4S emacs +5 1:26.1-5.el8_1.1 RHSA-2023:3189

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 emacs +4 1:27.2-6.el9_1.1 ALSA-2023:2626, ALSA-2023:2074
AlmaLinux 8 emacs +5 1:26.1-7.el8_7.1 ALSA-2023:3104, ALSA-2023:1930

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 emacs 1:27.2-6.el9_1.1 RLSA-2023:2074
Rocky Linux 8 emacs 1:26.1-7.el8_7.1 RLSA-2023:1930

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 emacs +6 1:28.2-3.amzn2023.0.5 ALAS2023-2023-147
Amazon Linux 2 emacs +6 1:27.2-4.amzn2.0.4 ALAS2-2023-2012

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) emacs 28.2-5 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 emacs +4 1:27.2-6.el9_1.1 ELSA-2023-2074
Oracle Linux 8 emacs +5 1:26.1-7.el8_7.1 ELSA-2023-1930

Advisories 24

References