Don't install ctags and etags (CVE-2022-45939) https://bugs.gentoo.org/883687 --- emacs-18.59/ChangeLog +++ emacs-18.59/ChangeLog @@ -1,3 +1,8 @@ +2022-11-30 Ulrich Mueller + + * Makefile: (install): Don't install ctags and etags. + Local command execution vulnerability, CVE-2022-45939. + Fri Oct 30 19:36:38 1992 Richard Stallman (rms@mole.gnu.ai.mit.edu) * Version 18.59 released. --- emacs-18.59/Makefile +++ emacs-18.59/Makefile @@ -64,8 +64,6 @@ else true; \ fi $(INSTALL) -c etc/emacsclient ${BINDIR}/emacsclient - $(INSTALL) -c etc/etags ${BINDIR}/etags - $(INSTALL) -c etc/ctags ${BINDIR}/ctags $(INSTALL) -c -m 1755 src/xemacs ${BINDIR}/xemacs $(INSTALL) -c -m 444 etc/emacs.1 ${MANDIR}/emacs.1 -rm -f ${BINDIR}/emacs --- emacs-18.59/etc/ChangeLog +++ emacs-18.59/etc/ChangeLog @@ -1,3 +1,8 @@ +2022-11-30 Ulrich Mueller + + * Makefile (EXECUTABLES): Don't build ctags and etags. + Local command execution vulnerability, CVE-2022-45939. + 2022-06-27 Ulrich Mueller * server.c (main): Check scanf return value. --- emacs-18.59/etc/Makefile +++ emacs-18.59/etc/Makefile @@ -4,7 +4,7 @@ # For Mips. Needed for who knows what. # CFLAGS = -g -systype bsd43 -EXECUTABLES = test-distrib etags ctags wakeup make-docfile \ +EXECUTABLES = test-distrib wakeup make-docfile \ digest-doc sorted-doc movemail cvtmail fakemail yow env \ server emacsclient