diff options
| author | wiz <wiz@pkgsrc.org> | 2012-08-13 06:53:06 +0000 |
|---|---|---|
| committer | wiz <wiz@pkgsrc.org> | 2012-08-13 06:53:06 +0000 |
| commit | 0e17eddd4df6f2285e411ec1cbfaf9075bbfff41 (patch) | |
| tree | e45a6ef2ce6c171255126757683194ab7b4de5cd /editors/emacs-nox11 | |
| parent | d58f23d91a04ba87d2cf3a8b35492bfcdad026e6 (diff) | |
| download | pkgsrc-0e17eddd4df6f2285e411ec1cbfaf9075bbfff41.tar.gz | |
Fix CVE-2012-3479:
When the Emacs user option `enable-local-variables' is set to `:safe'
(the default value is t), Emacs should automatically refuse to evaluate
`eval' forms in file-local variable sections. Due to the bug, Emacs
instead automatically evaluates such `eval' forms. Thus, if the user
changes the value of `enable-local-variables' to `:safe', visiting a
malicious file can cause automatic execution of arbitrary Emacs Lisp
code with the permissions of the user.
Bug tracker ref: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155
Diffstat (limited to 'editors/emacs-nox11')
| -rw-r--r-- | editors/emacs-nox11/Makefile | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/editors/emacs-nox11/Makefile b/editors/emacs-nox11/Makefile index 0e40ee785cf..cbaa358db5a 100644 --- a/editors/emacs-nox11/Makefile +++ b/editors/emacs-nox11/Makefile @@ -1,6 +1,7 @@ -# $NetBSD: Makefile,v 1.35 2012/02/20 01:22:32 obache Exp $ +# $NetBSD: Makefile,v 1.36 2012/08/13 06:53:06 wiz Exp $ PKGNAME= ${DISTNAME:S/-/-nox11-/} +PKGREVISION= 1 CONFLICTS+= emacs-[0-9]* |