Re: Is CVE-2024-30203 bogus? (Emacs)

                On 11/04/2024 16:13, Sean Whitton wrote:

This Emacs commit

    2024-02-20 12:44:30 +0300 Ihor Radchenko:

is not enough to fix the issue. More changes are required to make the
fix effective, namely

When external Org mode is loaded, that version should contain

https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=03635a335

besides Emacs commits ccc188fcf98 and 937b9042ad7

Emacs commit 6f9ea396f49 (fix of built-in Org mode) is currently
associated with CVE-2024-30203, however Org mode commit 03635a335
is not.