Add patch for CVE-2008-1694 (insecure temp files in SCCS vc handling)

PKGREVISION -> 13.

1 files changed, 38 insertions, 0 deletions

diff --git a/editors/emacs21/patches/patch-al b/editors/emacs21/patches/patch-al
new file mode 100644
index 00000000000..8b6da38c172
--- /dev/null
+++ b/editors/emacs21/patches/patch-al
@@ -0,0 +1,38 @@
+$NetBSD: patch-al,v 1.1 2008/07/13 18:03:01 dholland Exp $
+
+--- lib-src/vcdiff.orig	2001-02-20 07:36:28.000000000 -0500
++++ lib-src/vcdiff	2008-07-13 14:05:46.000000000 -0400
+@@ -3,14 +3,14 @@
+ # Enhanced sccs diff utility for use with vc mode.
+ # This version is more compatible with rcsdiff(1).
+ #
+-# Copyright (C) 1992, 1993, 1995, 1997, 2001
++# Copyright (C) 1992, 1993, 1995, 1997, 2001, 2008
+ #   Free Software Foundation, Inc.
+ #
+ # This file is part of GNU Emacs.
+ #
+ # GNU Emacs is free software; you can redistribute it and/or modify
+ # it under the terms of the GNU General Public License as published by
+-# the Free Software Foundation; either version 2, or (at your option)
++# the Free Software Foundation; either version 3, or (at your option)
+ # any later version.
+ #
+ # GNU Emacs is distributed in the hope that it will be useful,
+@@ -86,14 +86,14 @@
+ 	case $f in
+ 	s.* | */s.*)
+ 		if
+-			rev1=/tmp/geta$$
++			rev1=`mktemp /tmp/geta.XXXXXXXX`
+ 			get -s -p -k $sid1 "$f" > $rev1 &&
+ 			case $sid2 in
+ 			'')
+ 				workfile=`expr " /$f" : '.*/s.\(.*\)'`
+ 				;;
+ 			*)
+-				rev2=/tmp/getb$$
++				rev2=`mktemp /tmp/getb.XXXXXXXX`
+ 				get -s -p -k $sid2 "$f" > $rev2
+ 				workfile=$rev2
+ 			esac