mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-16 21:04:33 +00:00
emacs: patch CVE-2024-30203
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-30203 Pick the patch mentioned in the description. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This commit is contained in:
parent
b0edb9f891
commit
1459f29e71
@ -6,6 +6,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=1ebbd3e34237af26da5dc08a4e440464"
|
|||||||
|
|
||||||
SRC_URI = "https://ftp.gnu.org/pub/gnu/emacs/emacs-${PV}.tar.xz \
|
SRC_URI = "https://ftp.gnu.org/pub/gnu/emacs/emacs-${PV}.tar.xz \
|
||||||
file://0001-org-macro-set-templates-Prevent-code-evaluation.patch \
|
file://0001-org-macro-set-templates-Prevent-code-evaluation.patch \
|
||||||
|
file://0001-lisp-gnus-mm-view.el-mm-display-inline-fontify-Mark-.patch \
|
||||||
"
|
"
|
||||||
SRC_URI:append:class-target = " \
|
SRC_URI:append:class-target = " \
|
||||||
file://use-emacs-native-tools-for-cross-compiling.patch \
|
file://use-emacs-native-tools-for-cross-compiling.patch \
|
||||||
|
|||||||
@ -0,0 +1,27 @@
|
|||||||
|
From 0e7fe7809daa123921faa0bd088931cf8ddfd705 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Ihor Radchenko <yantar92@posteo.net>
|
||||||
|
Date: Tue, 20 Feb 2024 12:44:30 +0300
|
||||||
|
Subject: [PATCH] * lisp/gnus/mm-view.el (mm-display-inline-fontify): Mark
|
||||||
|
contents untrusted.
|
||||||
|
|
||||||
|
CVE: CVE-2024-30203
|
||||||
|
|
||||||
|
Upstream-Status: Backport [https://cgit.git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b9042ad7426acdcca33e3d931d8f495bdd804]
|
||||||
|
|
||||||
|
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
|
||||||
|
---
|
||||||
|
lisp/gnus/mm-view.el | 1 +
|
||||||
|
1 file changed, 1 insertion(+)
|
||||||
|
|
||||||
|
diff --git a/lisp/gnus/mm-view.el b/lisp/gnus/mm-view.el
|
||||||
|
index 2c40735..e24f3f3 100644
|
||||||
|
--- a/lisp/gnus/mm-view.el
|
||||||
|
+++ b/lisp/gnus/mm-view.el
|
||||||
|
@@ -504,6 +504,7 @@ If MODE is not set, try to find mode automatically."
|
||||||
|
(setq coding-system (mm-find-buffer-file-coding-system)))
|
||||||
|
(setq text (buffer-string))))
|
||||||
|
(with-temp-buffer
|
||||||
|
+ (setq untrusted-content t)
|
||||||
|
(insert (cond ((eq charset 'gnus-decoded)
|
||||||
|
(with-current-buffer (mm-handle-buffer handle)
|
||||||
|
(buffer-string)))
|
||||||
Loading…
x
Reference in New Issue
Block a user