Subject: CVS commit: pkgsrc/editors
From: Thomas Klausner
Date: 2012-08-13 08:53:07
Message id: 20120813065307.3458A175DD@cvs.netbsd.org

Log Message:
Fix CVE-2012-3479:
When the Emacs user option `enable-local-variables' is set to `:safe'
(the default value is t), Emacs should automatically refuse to evaluate
`eval' forms in file-local variable sections.  Due to the bug, Emacs
instead automatically evaluates such `eval' forms.  Thus, if the user
changes the value of `enable-local-variables' to `:safe', visiting a
malicious file can cause automatic execution of arbitrary Emacs Lisp
code with the permissions of the user.

Bug tracker ref: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155

Files:
RevisionActionfile
1.146modifypkgsrc/editors/emacs/Makefile
1.58modifypkgsrc/editors/emacs/distinfo
1.36modifypkgsrc/editors/emacs-nox11/Makefile
1.1addpkgsrc/editors/emacs/patches/patch-lisp_files.el