A remote execution exploit via enriched text has been blocked
authorLars Ingebrigtsen <larsi@gnus.org>
Sat, 9 Sep 2017 03:23:31 +0000 (20:23 -0700)
committerRob Browning <rlb@defaultvalue.org>
Tue, 12 Sep 2017 02:33:07 +0000 (21:33 -0500)
commit4089d95cb69c449bb92a68b22ebb69cc4e4cb26b
treeae552a6d52cb607ed2fbc0d4ab0aa38a705b0cc9
parent8900499027b692994a3b411954850c3672b9d2f6
A remote execution exploit via enriched text has been blocked

This upstream patch has been incorporated to fix the problem:

  Remove unsafe enriched mode translations

  * lisp/gnus/mm-view.el (mm-inline-text):
  Do not worry about enriched or richtext type.
  * lisp/textmodes/enriched.el (enriched-translations):
  Remove translations for FUNCTION, display (Bug#28350).
  (enriched-handle-display-prop, enriched-decode-display-prop): Remove.

Origin: backport, commit: 9ad0fcc54442a9a01d41be19880250783426db70)
Bug: https://bugs.gnu.org/28350
Bug-Debian: http://bugs.debian.org/875447
Forwarded: not-needed
lisp/gnus/mm-view.el
lisp/textmodes/enriched.el