Add patches for CVE-2008-1694 and CVE-2008-2142.

PKGREVISION -> 11.

3 files changed, 67 insertions, 0 deletions

diff --git a/editors/emacs20/patches/patch-cc b/editors/emacs20/patches/patch-cc
new file mode 100644
index 00000000000..29c1aa32c0b
--- /dev/null
+++ b/editors/emacs20/patches/patch-cc
@@ -0,0 +1,33 @@
+$NetBSD: patch-cc,v 1.1 2008/07/13 17:28:34 dholland Exp $
+
+--- lisp/fast-lock.el.orig	1999-05-14 04:45:54.000000000 -0400
++++ lisp/fast-lock.el	2008-07-13 12:32:19.000000000 -0400
+@@ -277,7 +277,7 @@
+ 				      (integer :tag "size")))))
+   :group 'fast-lock)
+ 
+-(defcustom fast-lock-cache-directories '("." "~/.emacs-flc")
++(defcustom fast-lock-cache-directories '("~/.emacs-flc")
+ ; - `internal', keep each file's Font Lock cache file in the same file.
+ ; - `external', keep each file's Font Lock cache file in the same directory.
+   "*Directories in which Font Lock cache files are saved and read.
+@@ -295,13 +295,18 @@
+  ((\"^/your/true/home/directory/\" . \".\") \"~/.emacs-flc\")
+ 
+ would cause a file's current directory to be used if the file is under your
+-home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'."
++home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'.
++For security reasons, it is not advisable to use the file's current directory
++to avoid the possibility of using the cache of another user."
+   :type '(repeat (radio (directory :tag "directory")
+ 			(cons :tag "Matching"
+ 			      (regexp :tag "regexp")
+ 			      (directory :tag "directory"))))
+   :group 'fast-lock)
+ 
++;;;###autoload
++(put 'fast-lock-cache-directories 'risky-local-variable t)
++
+ (defcustom fast-lock-save-events '(kill-buffer kill-emacs)
+   "*Events under which caches will be saved.
+ Valid events are `save-buffer', `kill-buffer' and `kill-emacs'.
diff --git a/editors/emacs20/patches/patch-cd b/editors/emacs20/patches/patch-cd
new file mode 100644
index 00000000000..2791670fe9d
--- /dev/null
+++ b/editors/emacs20/patches/patch-cd
@@ -0,0 +1,13 @@
+$NetBSD: patch-cd,v 1.1 2008/07/13 17:28:34 dholland Exp $
+
+--- lisp/loaddefs.el.orig	2008-07-13 12:31:55.000000000 -0400
++++ lisp/loaddefs.el	2008-07-13 12:32:23.000000000 -0400
+@@ -5345,6 +5345,8 @@
+ ;;;;;;  "fast-lock.el" (14139 58050))
+ ;;; Generated autoloads from fast-lock.el
+ 
++(put (quote fast-lock-cache-directories) (quote risky-local-variable) t)
++
+ (autoload (quote fast-lock-mode) "fast-lock" "\
+ Toggle Fast Lock mode.
+ With arg, turn Fast Lock mode on if and only if arg is positive and the buffer
diff --git a/editors/emacs20/patches/patch-ce b/editors/emacs20/patches/patch-ce
new file mode 100644
index 00000000000..9141d890c04
--- /dev/null
+++ b/editors/emacs20/patches/patch-ce
@@ -0,0 +1,21 @@
+$NetBSD: patch-ce,v 1.1 2008/07/13 17:28:34 dholland Exp $
+
+--- lib-src/vcdiff.orig	1997-01-01 00:33:42.000000000 -0500
++++ lib-src/vcdiff	2008-07-13 13:31:27.000000000 -0400
+@@ -66,14 +66,14 @@
+ 	case $f in
+ 	s.* | */s.*)
+ 		if
+-			rev1=/tmp/geta$$
++			rev1=`mktemp /tmp/geta.XXXXXXXX`
+ 			get -s -p -k $sid1 "$f" > $rev1 &&
+ 			case $sid2 in
+ 			'')
+ 				workfile=`expr " /$f" : '.*/s.\(.*\)'`
+ 				;;
+ 			*)
+-				rev2=/tmp/getb$$
++				rev2=`mktemp /tmp/getb.XXXXXXXX`
+ 				get -s -p -k $sid2 "$f" > $rev2
+ 				workfile=$rev2
+ 			esac