Git-Url: 
http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=7f4e671dd023a83a69cc77721044ec5dad6e544b

commit 7f4e671dd023a83a69cc77721044ec5dad6e544b
Author: Miklos Vajna <[EMAIL PROTECTED]>
Date:   Thu May 22 12:59:09 2008 +0200

emacs-22.2-3-i686
- added CVE-2008-2142.patch
- closes #3086

diff --git a/source/xapps/emacs/CVE-2008-2142.patch 
b/source/xapps/emacs/CVE-2008-2142.patch
new file mode 100644
index 0000000..e60159b
--- /dev/null
+++ b/source/xapps/emacs/CVE-2008-2142.patch
@@ -0,0 +1,32 @@
+--- lisp/obsolete/fast-lock.el.orig    2008-05-14 08:00:17.000000000 +0300
++++ lisp/obsolete/fast-lock.el 2008-05-14 08:16:32.000000000 +0300
+@@ -270,7 +270,7 @@
+                                     (integer :tag "size")))))
+   :group 'fast-lock)
+
+-(defcustom fast-lock-cache-directories '("." "~/.emacs-flc")
++(defcustom fast-lock-cache-directories '("~/.emacs-flc")
+ ; - `internal', keep each file's Font Lock cache file in the same file.
+ ; - `external', keep each file's Font Lock cache file in the same directory.
+   "*Directories in which Font Lock cache files are saved and read.
+@@ -288,13 +288,19 @@
+  ((\"^/your/true/home/directory/\" . \".\") \"~/.emacs-flc\")
+
+ would cause a file's current directory to be used if the file is under your
+-home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'."
++home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'.
++For security reasons, it is not advisable to use the file's current directory
++to avoid the possibility of using the cache of another user."
++
+   :type '(repeat (radio (directory :tag "directory")
+                       (cons :tag "Matching"
+                             (regexp :tag "regexp")
+                             (directory :tag "directory"))))
+   :group 'fast-lock)
+
++;;;###autoload
++(put 'fast-lock-cache-directories 'risky-local-variable t)
++
+ (defcustom fast-lock-save-events '(kill-buffer kill-emacs)
+   "*Events under which caches will be saved.
+ Valid events are `save-buffer', `kill-buffer' and `kill-emacs'.
diff --git a/source/xapps/emacs/FrugalBuild b/source/xapps/emacs/FrugalBuild
index 94cf8ab..0bdee01 100644
--- a/source/xapps/emacs/FrugalBuild
+++ b/source/xapps/emacs/FrugalBuild
@@ -5,7 +5,7 @@
pkgname=emacs
pkgver=22.2
pkgextraver=
-pkgrel=2
+pkgrel=3
pkgdesc="An extensible, customizable, self-documenting real-time display editor"
url="http://www.gnu.org/software/emacs/";
Finclude texinfo
@@ -15,8 +15,8 @@ groups=('xapps')
archs=('i686' 'x86_64')
up2date="lynx -dump http://ftp.gnu.org/pub/gnu/emacs/ |Flasttar"
source=(ftp://ftp.gnu.org/gnu/emacs/$pkgname-$pkgver$pkgextraver.tar.gz 
emacs-21.4-amd64.patch \
-       CVE-2008-1694.patch)
-signatures=($source.sig '' '')
+       CVE-2008-1694.patch CVE-2008-2142.patch)
+signatures=($source.sig '' '' '')

build() {
# LDFLAGS="-Wl,--hash-style=both" does not compile
_______________________________________________
Frugalware-git mailing list
Frugalware-git@frugalware.org
http://frugalware.org/mailman/listinfo/frugalware-git

Reply via email to