CVS commit: pkgsrc/editors/emacs24/patches

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Aug 13 06:39:06 UTC 2012

Added Files:
        pkgsrc/editors/emacs24/patches: patch-lisp_files.el

Log Message:
Fix CVE-2012-3479:
When the Emacs user option `enable-local-variables' is set to `:safe'
(the default value is t), Emacs should automatically refuse to evaluate
`eval' forms in file-local variable sections.  Due to the bug, Emacs
instead automatically evaluates such `eval' forms.  Thus, if the user
changes the value of `enable-local-variables' to `:safe', visiting a
malicious file can cause automatic execution of arbitrary Emacs Lisp
code with the permissions of the user.

Bug tracker ref: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.1 pkgsrc/editors/emacs24/patches/patch-lisp_files.el

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.