[continued from previous message]
diff -Nru org-mode-9.4.0+dfsg/debian/patches/CVE-2024-30205_03.patch org-mode-9.4.0+dfsg/debian/patches/CVE-2024-30205_03.patch
--- org-mode-9.4.0+dfsg/debian/patches/CVE-2024-30205_03.patch 1970-01-01 01:00:00.000000000 +0100
+++ org-mode-9.4.0+dfsg/debian/patches/CVE-2024-30205_03.patch 2024-04-30 09:08:33.000000000 +0100
@@ -0,0 +1,27 @@
+From: Ihor Radchenko <
yantar92@posteo.net>
+Date: Fri, 2 Feb 2024 20:59:41 +0100
+Subject: org: Fix security prompt for downloading remote resource
+
+* lisp/org.el (org--confirm-resource-safe): Do not assume that
+resource is safe when user replies "n" (do not download).
+
+Reported-by: Max Nikulin <
manikulin@gmail.com>
+Link:
https://orgmode.org/list/upj6uk$b7o$1@ciao.gmane.io
+(cherry picked from Emacs commit e56f0ef51bfdd0e03e817670754bc813fb3702a2) +---
+ lisp/org.el | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lisp/org.el b/lisp/org.el
+index fbcef9a..07ae99f 100644
+--- a/lisp/org.el
++++ b/lisp/org.el
+@@ -4817,7 +4817,7 @@ returns non-nil if any of them match."
+ (if (and (= char ?f) current-file)
+