CVS commit: pkgsrc/editors/emacs25

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Sep 11 11:33:08 UTC 2017

Modified Files:
        pkgsrc/editors/emacs25: Makefile distinfo

Log Message:
emacs25: fix security issue

GNU Emacs is an extensible, customizable, free/libre text editor and software
environment.  When Emacs renders MIME text/enriched data (Internet RFC 1896), it
is vulnerable to arbitrary code execution. Since Emacs-based mail clients decode
"Content-Type: text/enriched", this code is exploitable remotely. This bug
affects GNU Emacs versions 19.29 through 25.2.

Although we know no efforts to exploit this in the wild, exploitation is easy.

http://www.openwall.com/lists/oss-security/2017/09/11/1


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 pkgsrc/editors/emacs25/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/editors/emacs25/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/editors/emacs25/Makefile
diff -u pkgsrc/editors/emacs25/Makefile:1.9 pkgsrc/editors/emacs25/Makefile:1.10
--- pkgsrc/editors/emacs25/Makefile:1.9 Sun Jul 23 18:47:10 2017
+++ pkgsrc/editors/emacs25/Makefile     Mon Sep 11 11:33:08 2017
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.9 2017/07/23 18:47:10 dholland Exp $
+# $NetBSD: Makefile,v 1.10 2017/09/11 11:33:08 wiz Exp $
 
 CONFLICTS+=    emacs25-nox11-[0-9]*
 
-PKGREVISION=   1
+PKGREVISION=   2
 .include "../../editors/emacs25/Makefile.common"
 
 .include "options.mk"

Index: pkgsrc/editors/emacs25/distinfo
diff -u pkgsrc/editors/emacs25/distinfo:1.3 pkgsrc/editors/emacs25/distinfo:1.4
--- pkgsrc/editors/emacs25/distinfo:1.3 Thu Apr 27 13:27:57 2017
+++ pkgsrc/editors/emacs25/distinfo     Mon Sep 11 11:33:08 2017
@@ -1,7 +1,9 @@
-$NetBSD: distinfo,v 1.3 2017/04/27 13:27:57 ryoon Exp $
+$NetBSD: distinfo,v 1.4 2017/09/11 11:33:08 wiz Exp $
 
 SHA1 (emacs-25.2.tar.gz) = 30c18fb0cd932736bb6a7232ab62f562cf89a785
 RMD160 (emacs-25.2.tar.gz) = 2b0cd1fa04abb2156fd4a33f73e9b929f97dca43
 SHA512 (emacs-25.2.tar.gz) = 3ddecdfb64fba400d82b6d44fd03799ac1a2032aa3bda6eb18a83d680465f1df3e8128b9544daaeed4b5ead0ac11955c1ad613de6a489236995def840c4d501c
 Size (emacs-25.2.tar.gz) = 64289988 bytes
+SHA1 (patch-lisp_gnus_mm-view.el) = b654fffd12d3467ea6ffa33f7d831ff69054dc4f
+SHA1 (patch-lisp_textmodes_enriched.el) = 62d807368088b11722cd68fafb0017c64f1eac3b
 SHA1 (patch-src_inotify.c) = 1fdc6566ed57e8418f1ddc85bb03518d7d9d6bb3