[pkgsrc/pkgsrc-2008Q1]: pkgsrc/editors/emacs21 pullup ticket #2413 - requeste...

[rtr <rtr%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/9eadd33a32e6
branches:  pkgsrc-2008Q1
changeset: 540404:9eadd33a32e6
user:      rtr <rtr%pkgsrc.org@localhost>
date:      Thu Jun 05 12:04:36 2008 +0000

description:
pullup ticket #2413 - requested by markd
emacs21: Fix for CVE-2008-2142

revisions pulled up:
- pkgsrc/editors/emacs21/Makefile               1.9
- pkgsrc/editors/emacs21/Makefile.common        1.5
- pkgsrc/editors/emacs21/distinfo               1.6
- pkgsrc/editors/emacs21/patches/patch-aw       1.1
- pkgsrc/editors/emacs21/patches/patch-ay       1.1

   Module Name: pkgsrc
   Committed By:        markd
   Date:                Tue Jun  3 22:17:00 UTC 2008

   Modified Files:
        pkgsrc/editors/emacs21: Makefile Makefile.common distinfo
   Added Files:
        pkgsrc/editors/emacs21/patches: patch-aw patch-ay

   Log Message:
   Fix for CVE-2008-2142, automatically loading and executing .flc files.

diffstat:

 editors/emacs21/Makefile         |   4 ++--
 editors/emacs21/Makefile.common  |   5 +++--
 editors/emacs21/distinfo         |   4 +++-
 editors/emacs21/patches/patch-aw |  33 +++++++++++++++++++++++++++++++++
 editors/emacs21/patches/patch-ay |  13 +++++++++++++
 5 files changed, 54 insertions(+), 5 deletions(-)

diffs (103 lines):

diff -r 5da3467a2138 -r 9eadd33a32e6 editors/emacs21/Makefile
--- a/editors/emacs21/Makefile  Thu Jun 05 11:58:17 2008 +0000
+++ b/editors/emacs21/Makefile  Thu Jun 05 12:04:36 2008 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.8 2007/10/29 12:38:02 uebayasi Exp $
+# $NetBSD: Makefile,v 1.8.4.1 2008/06/05 12:04:36 rtr Exp $
 
-PKGREVISION=   11
+PKGREVISION=   12
 CATEGORIES=    editors
 COMMENT=       GNU editing macros (editor)
 
diff -r 5da3467a2138 -r 9eadd33a32e6 editors/emacs21/Makefile.common
--- a/editors/emacs21/Makefile.common   Thu Jun 05 11:58:17 2008 +0000
+++ b/editors/emacs21/Makefile.common   Thu Jun 05 12:04:36 2008 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.2 2007/10/29 12:38:02 uebayasi Exp $
+# $NetBSD: Makefile.common,v 1.2.4.1 2008/06/05 12:04:36 rtr Exp $
 
 DISTNAME=      emacs-${EMACSVERSION}a
 
@@ -83,7 +83,8 @@
 post-build:
        cd ${WRKSRC}/lisp && \
           rm sort.elc && ${MAKE_PROGRAM} sort.elc && \
-          rm mail/smtpmail.elc && ${MAKE_PROGRAM} mail/smtpmail.elc
+          rm mail/smtpmail.elc && ${MAKE_PROGRAM} mail/smtpmail.elc && \
+          rm fast-lock.elc && ${MAKE_PROGRAM} fast-lock.elc
 
 pre-install:
        @${FIND} ${WRKSRC} -type f -name "*.orig" -print | ${XARGS} ${RM} -f
diff -r 5da3467a2138 -r 9eadd33a32e6 editors/emacs21/distinfo
--- a/editors/emacs21/distinfo  Thu Jun 05 11:58:17 2008 +0000
+++ b/editors/emacs21/distinfo  Thu Jun 05 12:04:36 2008 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.5 2007/06/11 13:38:30 markd Exp $
+$NetBSD: distinfo,v 1.5.8.1 2008/06/05 12:04:36 rtr Exp $
 
 SHA1 (emacs-21.4a.tar.gz) = cdb33731180fe4a912838af805dd35e3f55394d4
 RMD160 (emacs-21.4a.tar.gz) = c312e739935b56d08783bbfe97992297a363cb8a
@@ -24,6 +24,8 @@
 SHA1 (patch-at) = bdd1bf7eea72a0b81677817d9b36cddaa07a189c
 SHA1 (patch-au) = e5d90961b4d78c37dec196097a16e0b6ac22e3bb
 SHA1 (patch-av) = 9b6ea439df406a55310e2ca1af45ed56f1663263
+SHA1 (patch-aw) = d7d9013734853a9542fd657f1b532d3c108f88e0
+SHA1 (patch-ay) = 82e4eb371be4dff891878973888c38ca53e9f326
 SHA1 (patch-az) = 43753accb1b9ffc2c63e638c31236b8e4880080b
 SHA1 (patch-ba) = ae05985ce8cabffdfbfb84905e1d6b0de7690b25
 SHA1 (patch-bb) = bf748292c57459b1240da01f9d3df16e4dc40fa2
diff -r 5da3467a2138 -r 9eadd33a32e6 editors/emacs21/patches/patch-aw
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/editors/emacs21/patches/patch-aw  Thu Jun 05 12:04:36 2008 +0000
@@ -0,0 +1,33 @@
+$NetBSD: patch-aw,v 1.1.2.2 2008/06/05 12:04:37 rtr Exp $
+
+--- lisp/fast-lock.el.orig     2001-07-16 04:15:34.000000000 +1200
++++ lisp/fast-lock.el
+@@ -278,7 +278,7 @@ for buffers in Rmail mode, and size is i
+                                     (integer :tag "size")))))
+   :group 'fast-lock)
+ 
+-(defcustom fast-lock-cache-directories '("." "~/.emacs-flc")
++(defcustom fast-lock-cache-directories '("~/.emacs-flc")
+ ; - `internal', keep each file's Font Lock cache file in the same file.
+ ; - `external', keep each file's Font Lock cache file in the same directory.
+   "*Directories in which Font Lock cache files are saved and read.
+@@ -296,13 +296,18 @@ For example:
+  ((\"^/your/true/home/directory/\" . \".\") \"~/.emacs-flc\")
+ 
+ would cause a file's current directory to be used if the file is under your
+-home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'."
++home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'.
++For security reasons, it is not advisable to use the file's current directory
++to avoid the possibility of using the cache of another user."
+   :type '(repeat (radio (directory :tag "directory")
+                       (cons :tag "Matching"
+                             (regexp :tag "regexp")
+                             (directory :tag "directory"))))
+   :group 'fast-lock)
+ 
++;;;###autoload
++(put 'fast-lock-cache-directories 'risky-local-variable t)
++
+ (defcustom fast-lock-save-events '(kill-buffer kill-emacs)
+   "*Events under which caches will be saved.
+ Valid events are `save-buffer', `kill-buffer' and `kill-emacs'.
diff -r 5da3467a2138 -r 9eadd33a32e6 editors/emacs21/patches/patch-ay
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/editors/emacs21/patches/patch-ay  Thu Jun 05 12:04:36 2008 +0000
@@ -0,0 +1,13 @@
+$NetBSD: patch-ay,v 1.1.2.2 2008/06/05 12:04:37 rtr Exp $
+
+--- lisp/loaddefs.el.orig      2003-03-19 02:36:18.000000000 +1200
++++ lisp/loaddefs.el
+@@ -6963,6 +6963,8 @@ of colors that the current display can h
+ ;;;;;;  "fast-lock.el" (15611 31344))
+ ;;; Generated autoloads from fast-lock.el
+ 
++(put (quote fast-lock-cache-directories) (quote risky-local-variable) t)
++
+ (autoload (quote fast-lock-mode) "fast-lock" "\
+ Toggle Fast Lock mode.
+ With arg, turn Fast Lock mode on if and only if arg is positive and the buffer