mbox series

[meta-oe,scarthgap,v3,0/5] emacs cve fixes

Message ID 20251019173712.1460844-1-skandigraun@gmail.com
Headers show
Series emacs cve fixes | expand

Message

Gyorgy Sarvari Oct. 19, 2025, 5:37 p.m. UTC 
v1: https://lists.openembedded.org/g/openembedded-devel/message/120285
    This series only applied to class-target.

v2: https://lists.openembedded.org/g/openembedded-devel/message/120796
    This was identical to v1, but tried to apply the patches on native
    builds also. However accidentally duplicated the patches in the SRC_URI -.- 
    Mea culpa.

v3: The patches are the same as previously, but the SRC_URI should not
    duplicated anymore, and the patches should be applied for both
    native and target builds.

---

Gyorgy Sarvari (5):
  emacs: patch CVE-2024-30202
  emacs: patch CVE-2024-30203
  emacs: patch CVE-2024-30204
  emacs: patch CVE-2024-30205
  emacs: patch CVE-2024-39331

 meta-oe/recipes-support/emacs/emacs_29.1.bb   |  5 ++
 ...w.el-mm-display-inline-fontify-Mark-.patch | 27 +++++++
 ...nts-Consider-all-remote-files-unsafe.patch | 38 ++++++++++
 ...w-Add-protection-when-untrusted-cont.patch | 60 ++++++++++++++++
 ...abbrev-Do-not-evaluate-arbitrary-uns.patch | 71 +++++++++++++++++++
 ...et-templates-Prevent-code-evaluation.patch | 47 ++++++++++++
 6 files changed, 248 insertions(+)
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-lisp-gnus-mm-view.el-mm-display-inline-fontify-Mark-.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-file-contents-Consider-all-remote-files-unsafe.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-latex-preview-Add-protection-when-untrusted-cont.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-link-expand-abbrev-Do-not-evaluate-arbitrary-uns.patch
 create mode 100644 meta-oe/recipes-support/emacs/files/0001-org-macro-set-templates-Prevent-code-evaluation.patch