z572 pushed a commit to branch master
in repository guix.

commit 868a022cdca164941a6fe8dcf205aefc693781cb
Author: Zheng Junjie <zhengjun...@iscas.ac.cn>
AuthorDate: Sun Jun 23 11:41:24 2024 +0800

    gnu: emacs-minimal: Graft with 29.4 [security fixes].
    
    Arbitrary shell commands are no longer run when turning on Org mode.
    This is for security reasons, to avoid running malicious commands.
    
    * gnu/packages/emacs.scm (emacs-minimal/fixed): New variable.
    (emacs-minimal)[replacement]: Graft.
    
    Change-Id: Idb74ee0a05486bfe5052c4dd804fbdaec8921774
---
 gnu/packages/emacs.scm | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/emacs.scm b/gnu/packages/emacs.scm
index 411bea3ab6..6557180139 100644
--- a/gnu/packages/emacs.scm
+++ b/gnu/packages/emacs.scm
@@ -24,7 +24,7 @@
 ;;; Copyright © 2020 Morgan Smith <morgan.j.sm...@outlook.com>
 ;;; Copyright © 2022 Zhu Zihao <all_but_l...@163.com>
 ;;; Copyright © 2023 Declan Tsien <declants...@riseup.net>
-;;; Copyright © 2023 Zheng Junjie <873216...@qq.com>
+;;; Copyright © 2023, 2024 Zheng Junjie <873216...@qq.com>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -101,6 +101,7 @@
   (package
     (name "emacs-minimal")
     (version "29.3")
+    (replacement emacs-minimal/fixed)
     (source (origin
               (method url-fetch)
               (uri (string-append "mirror://gnu/emacs/emacs-"
@@ -334,6 +335,18 @@ languages.")
             (files '("lib/tree-sitter")))))
     (properties `((upstream-name . "emacs")))))
 
+(define emacs-minimal/fixed
+  (package
+    (inherit emacs-minimal)
+    (version "29.4")
+    (source
+     (origin (inherit (package-source emacs-minimal))
+             (uri (string-append "mirror://gnu/emacs/emacs-"
+                                 version ".tar.xz"))
+             (sha256
+              (base32
+               "0dd2mh6maa7dc5f49qdzj7bi4hda4wfm1cvvgq560djcz537k2ds"))))))
+
 (define-public emacs-no-x
   (package/inherit emacs-minimal
     (name "emacs-no-x")

Reply via email to