diff options
author | Ulrich Müller <ulm@gentoo.org> | 2007-11-03 14:49:21 +0000 |
---|---|---|
committer | Ulrich Müller <ulm@gentoo.org> | 2007-11-03 14:49:21 +0000 |
commit | 68998b483b604edc696f11d4978ae4e05d83904e (patch) | |
tree | 71285c424cd8a23f58d1a0d3af0d6e216ee0e4fe /app-editors/emacs/files | |
parent | Stable on x86, bug #195171 (diff) | |
download | gentoo-2-68998b483b604edc696f11d4978ae4e05d83904e.tar.gz gentoo-2-68998b483b604edc696f11d4978ae4e05d83904e.tar.bz2 gentoo-2-68998b483b604edc696f11d4978ae4e05d83904e.zip |
Security fix for function hack-local-variables, CVE-2007-5795, bug #197958.
(Portage version: 2.1.3.16)
Diffstat (limited to 'app-editors/emacs/files')
-rw-r--r-- | app-editors/emacs/files/digest-emacs-22.1-r2 | 3 | ||||
-rw-r--r-- | app-editors/emacs/files/emacs-22.1-hack-local-variables.patch | 13 |
2 files changed, 16 insertions, 0 deletions
diff --git a/app-editors/emacs/files/digest-emacs-22.1-r2 b/app-editors/emacs/files/digest-emacs-22.1-r2 new file mode 100644 index 000000000000..44943fdbcd94 --- /dev/null +++ b/app-editors/emacs/files/digest-emacs-22.1-r2 @@ -0,0 +1,3 @@ +MD5 6949df37caec2d7a2e0eee3f1b422726 emacs-22.1.tar.gz 38172226 +RMD160 da5360871db8b1d473ff7f0b0937ee6c278c0b19 emacs-22.1.tar.gz 38172226 +SHA256 1ec43bef7127e572f92d7c3a846951cf8e263e27445c62c867035f94681c3ed0 emacs-22.1.tar.gz 38172226 diff --git a/app-editors/emacs/files/emacs-22.1-hack-local-variables.patch b/app-editors/emacs/files/emacs-22.1-hack-local-variables.patch new file mode 100644 index 000000000000..ed73505c68a2 --- /dev/null +++ b/app-editors/emacs/files/emacs-22.1-hack-local-variables.patch @@ -0,0 +1,13 @@ +--- lisp/files.el 13 Oct 2007 14:09:56 -0000 1.896.2.28 ++++ lisp/files.el 2 Nov 2007 11:02:12 -0000 1.896.2.29 +@@ -2764,8 +2764,8 @@ + ;; If caller wants only the safe variables, + ;; install only them. + (dolist (elt result) +- (unless (or (memq (car elt) unsafe-vars) +- (memq (car elt) risky-vars)) ++ (unless (or (member elt unsafe-vars) ++ (member elt risky-vars)) + (hack-one-local-variable (car elt) (cdr elt)))) + ;; Query, except in the case where all are known safe + ;; if the user wants no quuery in that case. |