A remote execution exploit via enriched text has been blocked
authorLars Ingebrigtsen <larsi@gnus.org>
Sat, 9 Sep 2017 03:23:31 +0000 (20:23 -0700)
committerRob Browning <rlb@defaultvalue.org>
Tue, 12 Sep 2017 02:51:49 +0000 (03:51 +0100)
commit7da165a0c3916ce7338f788edf59ada1fe8b23bd
treed99d49682378aaf28baa5f9a8b48b60f9d77a2b5
parentb846fdba43f991c363a9c33983539711e4e18b04
A remote execution exploit via enriched text has been blocked

This upstream patch has been incorporated to fix the problem:

  Remove unsafe enriched mode translations

  * lisp/gnus/mm-view.el (mm-inline-text):
  Do not worry about enriched or richtext type.
  * lisp/textmodes/enriched.el (enriched-translations):
  Remove translations for FUNCTION, display (Bug#28350).
  (enriched-handle-display-prop, enriched-decode-display-prop): Remove.

Origin: backport, commit: 9ad0fcc54442a9a01d41be19880250783426db70)
Bug: https://bugs.gnu.org/28350
Bug-Debian: http://bugs.debian.org/875447
Forwarded: not-needed

Gbp-Pq: Name 0012-A-remote-execution-exploit-via-enriched-text-has-bee.patch
lisp/gnus/mm-view.el
lisp/textmodes/enriched.el