Path to this page:
Subject: CVS commit: pkgsrc/editors
From: Ryo ONODERA
Date: 2017-09-12 05:19:02
Message id: 20170912031902.F0D64FA98@cvs.NetBSD.org
Log Message:
Update emacs25 and emacs25-nox11 to 25.3
Changelog:
This is an emergency release to fix a security vulnerability in Emacs.
Enriched Text mode has its support for decoding 'x-display' disabled.
This feature allows saving 'display' properties as part of text.
Emacs 'display' properties support evaluation of arbitrary Lisp forms
as part of instantiating the property, so decoding 'x-display' is
vulnerable to executing arbitrary malicious Lisp code included in the
text (e.g., sent as part of an email message).
This vulnerability was introduced in Emacs 19.29.
Files: