A remote execution exploit via enriched text has been blocked
authorLars Ingebrigtsen <larsi@gnus.org>
Sat, 9 Sep 2017 03:23:31 +0000 (20:23 -0700)
committerRob Browning <rlb@defaultvalue.org>
Tue, 15 May 2018 06:04:25 +0000 (01:04 -0500)
commite5a30a67a75250547d0676f9f9ede7eff57065a2
treec84375b0f477f1269bb4bbdd8e83aca258a32b1e
parent9f401bf21707b484aeb2d2f6c1ed2ce41c50f253
A remote execution exploit via enriched text has been blocked

This upstream patch has been incorporated to fix the problem:

  Remove unsafe enriched mode translations

  * lisp/gnus/mm-view.el (mm-inline-text):
  Do not worry about enriched or richtext type.
  * lisp/textmodes/enriched.el (enriched-translations):
  Remove translations for FUNCTION, display (Bug#28350).
  (enriched-handle-display-prop, enriched-decode-display-prop): Remove.

Origin: backport, commit: 9ad0fcc54442a9a01d41be19880250783426db70)
Bug: https://bugs.gnu.org/28350
Bug-Debian: http://bugs.debian.org/875447
Forwarded: not-needed
lisp/gnus/mm-view.el
lisp/textmodes/enriched.el