Ubuntu just announced a couple security updates for Emacs 23.3. Does
anyone here know if XEmacs has similar issues?
* SECURITY UPDATE: untrusted search path vulnerability
- debian/patches/CVE-2012-0035.patch: add new option and use it in
lisp/cedet/ede/auto.el, lisp/cedet/ede.el, lisp/cedet/ede/simple.el.
- CVE-2012-0035
* SECURITY UPDATE: arbitrary lisp code execution via crafted file
- debian/patches/CVE-2012-3479.patch: ignore eval: forms that are not
known to be safe if enable-local-variables is set to :safe in
lisp/files.el.
- CVE-2012-3479
mike
_______________________________________________
XEmacs-Beta mailing list
XEmacs-Beta(a)xemacs.org
http://lists.xemacs.org/mailman/listinfo/xemacs-beta