Hi Release Team,FTR this is not the right bug, this was a bullseye PU for fossil, not org-mode (#1070108). Not sure what happened.
This fossil update never made it to bullseye. Leaving this closed, planning a DLA with an updated fix. Cheers! Sylvain Beucler Debian LTS TeamOn Mon, 27 May 2024 14:04:37 +0000 Jonathan Wiltshire <jmw@debian.org> wrote:
package release.debian.org tags 1071417 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details ============== Package: org-mode Version: 9.4.0+dfsg-1+deb11u2 Explanation: protect against unsafe remote resources [CVE-2024-30203 CVE-2024-30204 CVE-2024-30205]