mbox series

[meta-oe,scarthgap,v2,0/5] emacs cve fixes

Message ID 20251019170737.1311808-1-skandigraun@gmail.com
Headers show
Series emacs cve fixes | expand

Message

Gyorgy Sarvari Oct. 19, 2025, 5:07 p.m. UTC 
This series is identical to v1, except that the patches are added to SRC_URI
instead of SRC_URI:class-target - this way the vulnerabilities are 
fixed in the native build also.

---

Gyorgy Sarvari (5):
  emacs: patch CVE-2024-30202
  emacs: patch CVE-2024-30203
  emacs: patch CVE-2024-30204
  emacs: patch CVE-2024-30205
  emacs: patch CVE-2024-39331

 meta-oe/recipes-support/emacs/emacs_29.1.bb   | 10 +++
 ...w.el-mm-display-inline-fontify-Mark-.patch | 27 +++++++
 ...nts-Consider-all-remote-files-unsafe.patch | 38 ++++++++++
 ...w-Add-protection-when-untrusted-cont.patch | 60 ++++++++++++++++
 ...abbrev-Do-not-evaluate-arbitrary-uns.patch | 71 +++++++++++++++++++
 ...et-templates-Prevent-code-evaluation.patch | 47 ++++++++++++
 6 files changed, 253 insertions(+)
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-lisp-gnus-mm-view.el-mm-display-inline-fontify-Mark-.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-file-contents-Consider-all-remote-files-unsafe.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-latex-preview-Add-protection-when-untrusted-cont.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-link-expand-abbrev-Do-not-evaluate-arbitrary-uns.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-macro-set-templates-Prevent-code-evaluation.patch