emacs-elpa-diffs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[elpa] externals-release/org 8f8ec2ccf3: * lisp/ob-latex.el (org-babel-e


From: ELPA Syncer
Subject: [elpa] externals-release/org 8f8ec2ccf3: * lisp/ob-latex.el (org-babel-execute:latex): Fix command injection vulnerability
Date: Tue, 7 Mar 2023 07:59:15 -0500 (EST)

branch: externals-release/org
commit 8f8ec2ccf3f5ef8f38d68ec84a7e4739c45db485
Author: Xi Lu <lx@shellcodes.org>
Commit: Ihor Radchenko <yantar92@posteo.net>

    * lisp/ob-latex.el (org-babel-execute:latex): Fix command injection 
vulnerability
    
    Link: 
https://orgmode.org/list/tencent_5C4D5D0DEFDDBBFC66F855703927E60C7706@qq.com
    
    TINYCHANGE
---
 lisp/ob-latex.el | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lisp/ob-latex.el b/lisp/ob-latex.el
index 428907a270..a0154bf26d 100644
--- a/lisp/ob-latex.el
+++ b/lisp/ob-latex.el
@@ -180,7 +180,7 @@ This function is called by `org-babel-execute-src-block'."
                             tmp-pdf
                              (list org-babel-latex-pdf-svg-process)
                              extension err-msg log-buf)))
-              (shell-command (format "mv %s %s" img-out out-file)))))
+              (rename-file img-out out-file t))))
          ((string-suffix-p ".tikz" out-file)
          (when (file-exists-p out-file) (delete-file out-file))
          (with-temp-file out-file



reply via email to

[Prev in Thread] Current Thread [Next in Thread]