proj/emacs-patches.git - Patches and other files related to Emacs packages

	Commit message (Collapse)	Author	Age	Files	Lines
*	Fix multiple command injection vulnerabilitiesemacs-28.2-patches-3 emacs-27.2-patches-6 emacs-26.3-patches-5 emacs-25.3-patches-5	Ulrich Müller	2023-02-26	1	-0/+22
	This fixes command injection vulnerabilities in etags (CVE-2022-48337), ruby-mode (CVE-2022-48338), and htmlfontify (CVE-2022-48339) for Emacs slots 25, 26, 27, and 28. Note that Emacs 25 and 26 are not affected by the ruby-mode vulnerability because function ruby-find-library-file did not yet exist (and there is no call to the gem command in ruby-mode.el). Emacs 18 is not affected by either of them: It doesn't have ruby-mode and htmlfontify, and we no longer install the ctags and etags binaries. Bug: https://bugs.gentoo.org/897950 Signed-off-by: Ulrich Müller <ulm@gentoo.org>