From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Oliver To: git-commits@fedoraproject.org Subject: [rpms/emacs] rawhide: Prevent arbitrary code execution in flymake (rhbz#2537390). Date: Wed, 23 Sep 2026 12:03:44 GMT Message-ID: <179016502457.1.4276084355091865580.rpms-emacs-78cdbd0007db@fedoraproject.org> List-ID: X-Git-Repo: rpms/emacs X-Git-Branch: rawhide X-Git-Rev: 78cdbd0007dbdb50e810cb1c4d60bb8f5da084f4 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZW1hY3MKQnJhbmNo IDogcmF3aGlkZQpDb21taXQgOiA3OGNkYmQwMDA3ZGJkYjUwZTgxMGNiMWM0ZDYwYmI4ZjVkYTA4 NGY0CkF1dGhvciA6IFBldGVyIE9saXZlciA8Z2l0QG1hdml0Lm9yZy51az4KRGF0ZSAgIDogMjAy Ni0wOS0yM1QxMzowMjozMiswMTowMApTdGF0cyAgOiArNjAvLTAgaW4gMiBmaWxlKHMpClVSTCAg ICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvZW1hY3MvYy83OGNkYmQwMDA3 ZGJkYjUwZTgxMGNiMWM0ZDYwYmI4ZjVkYTA4NGY0P2JyYW5jaD1yYXdoaWRlCgpMb2c6ClByZXZl bnQgYXJiaXRyYXJ5IGNvZGUgZXhlY3V0aW9uIGluIGZseW1ha2UgKHJoYnojMjUzNzM5MCkuCgot LS0KZGlmZiAtLWdpdCBhLzAwMDEtZmx5bWFrZS5lbC1HZW5lcmFsaXplLXRydXN0ZWQtY29udGVu dC1wLWNoZWNrLXRvLWFsbC5wYXRjaCBiLzAwMDEtZmx5bWFrZS5lbC1HZW5lcmFsaXplLXRydXN0 ZWQtY29udGVudC1wLWNoZWNrLXRvLWFsbC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi4yOTZhZmQxCi0tLSAvZGV2L251bGwKKysrIGIvMDAwMS1mbHltYWtlLmVsLUdl bmVyYWxpemUtdHJ1c3RlZC1jb250ZW50LXAtY2hlY2stdG8tYWxsLnBhdGNoCkBAIC0wLDAgKzEs NTYgQEAKK0Zyb20gYWJjODAyZWUyZWIwYjE2NjMzNDlkZGYyMmE0NjFmOGU1NGEzODNmYiBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFN0ZWZhbiBNb25uaWVyIDxtb25uaWVyQGlyby51 bW9udHJlYWwuY2E+CitEYXRlOiBNb24sIDE0IFNlcCAyMDI2IDExOjMwOjM5ICswMTAwCitTdWJq ZWN0OiBbUEFUQ0hdIGZseW1ha2UuZWw6IEdlbmVyYWxpemUgdHJ1c3RlZC1jb250ZW50LXAgY2hl Y2sgdG8gYWxsCisgYmFja2VuZHMKKworTWluaW1hbCBzYWZlIGJhY2twb3J0IG9mIHRoaXMgY2hh bmdlOgorCisgICAgQXV0aG9yOiAgICAgU3RlZmFuIE1vbm5pZXIgPG1vbm5pZXJAaXJvLnVtb250 cmVhbC5jYT4KKyAgICBBdXRob3JEYXRlOiBGcmkgU2VwIDExIDIxOjQ4OjU1IDIwMjYgLTA0MDAK KworICAgICAgZmx5bWFrZS5lbDogR2VuZXJhbGl6ZSB0cnVzdGVkLWNvbnRlbnQtcCBjaGVjayB0 byBhbGwgYmFja2VuZHMKKworICAgICAgUmF0aGVyIHRoYW4gaGF2ZSBlYWNoIGFuZCBldmVyeSBi YWNrZW5kIGNoZWNrCisgICAgICAndHJ1c3RlZC1jb250ZW50LXAnIGlmIGl0IGZlZWxzIG5lY2Vz c2FyeSwgaW1wbGVtZW50IHRoZSBjaGVjaworICAgICAgb25jZSBhbmQgZm9yYWxsIGluIGZseW1h a2UuZWwgYW5kIHByb3ZpZGUgYSB3YXQgZm9yIGJhY2tlbmRzIHRvCisgICAgICBza2lwIHRoYXQg dGVzdCwgc28gd2UgcmVwbGFjZSBhbiAib3B0LWluIiB3aXRoIGFuICJvcHQtb3V0IgorICAgICAg dGhhdCdzIGEgYml0IG1vcmUgc2VjdXJlIGJ5IGRlc2lnbi4KKworICAgICAgKiBsaXNwL3Byb2dt b2Rlcy9lbGlzcC1tb2RlLmVsIChlbGlzcC1mbHltYWtlLWJ5dGUtY29tcGlsZSk6CisgICAgICBN b3ZlICd0cnVzdGVkLWNvbnRlbnQtcCcgdG8gZmx5bWFrZS5lbC4KKyAgICAgICogbGlzcC9wcm9n bW9kZXMvZmx5bWFrZS5lbCAoZmx5bWFrZS0tcnVuLWJhY2tlbmQpOgorICAgICAgTW92ZSAndHJ1 c3RlZC1jb250ZW50LXAnIGZyb20gZWxpc3AtbW9kZS5lbC4KKworICAgICAgKiBsaXNwL3Byb2dt b2Rlcy9lZ2xvdC5lbCAoZWdsb3QtZmx5bWFrZS1iYWNrZW5kKTogTWFyayBhcyBzYWZlLgorCisq IGxpc3AvcHJvZ21vZGVzL2ZseW1ha2UuZWwgKGZseW1ha2UtLXJ1bi1iYWNrZW5kKTogQ29weQor dHJ1c3RlZC1jb250ZW50LXAgY2hlY2sgZnJvbSBlbGlzcC1tb2RlLmVsLiAgRG8gbm90IG1lcmdl IHRvCittYXN0ZXIuCistLS0KKyBsaXNwL3Byb2dtb2Rlcy9mbHltYWtlLmVsIHwgOSArKysrKysr LS0KKyAxIGZpbGUgY2hhbmdlZCwgNyBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQorCitk aWZmIC0tZ2l0IGEvbGlzcC9wcm9nbW9kZXMvZmx5bWFrZS5lbCBiL2xpc3AvcHJvZ21vZGVzL2Zs eW1ha2UuZWwKK2luZGV4IGZmZjQyNjk2NzYxLi40MDc2MTAzMWRjMiAxMDA2NDQKKy0tLSBhL2xp c3AvcHJvZ21vZGVzL2ZseW1ha2UuZWwKKysrKyBiL2xpc3AvcHJvZ21vZGVzL2ZseW1ha2UuZWwK K0BAIC0xMjcxLDggKzEyNzEsMTMgQEAgZmx5bWFrZS0tcnVuLWJhY2tlbmQKKyAgICAgICAgICAg ICAoZmx5bWFrZS0tc3RhdGUtZGlzYWJsZWQgc3RhdGUpIG5pbAorICAgICAgICAgICAgIChmbHlt YWtlLS1zdGF0ZS1yZXBvcnRlZC1wIHN0YXRlKSBuaWwpKQorICAgICAoY29uZGl0aW9uLWNhc2Ut dW5sZXNzLWRlYnVnIGVycgorLSAgICAgICAgKGFwcGx5IGJhY2tlbmQgKGZseW1ha2UtbWFrZS1y ZXBvcnQtZm4gYmFja2VuZCBydW4tdG9rZW4pCistICAgICAgICAgICAgICAgYXJncykKKysgICAg ICAgIChpZiAob3IgKHRydXN0ZWQtY29udGVudC1wKSAoZnVuY3Rpb24tZ2V0IGJhY2tlbmQgJ2Zs eW1ha2UtYWx3YXlzLXNhZmUpKQorKyAgICAgICAgICAgIChhcHBseSBiYWNrZW5kIChmbHltYWtl LW1ha2UtcmVwb3J0LWZuIGJhY2tlbmQgcnVuLXRva2VuKQorKyAgICAgICAgICAgICAgICAgICBh cmdzKQorKyAgICAgICAgICAobWVzc2FnZSAiRGlzYWJsaW5nICVTIGluICVzICh1bnRydXN0ZWQg Y29udGVudCkiCisrICAgICAgICAgICAgICAgICAgIGJhY2tlbmQgKGJ1ZmZlci1uYW1lKSkKKysg ICAgICAgICAgKHVzZXItZXJyb3IgIkRpc2FibGluZyAlUyBpbiAlcyAodW50cnVzdGVkIGNvbnRl bnQpIgorKyAgICAgICAgICAgICAgICAgICAgICBiYWNrZW5kIChidWZmZXItbmFtZSkpKQorICAg ICAgIChlcnJvcgorICAgICAgICAoZmx5bWFrZS0tZGlzYWJsZS1iYWNrZW5kIGJhY2tlbmQgZXJy KSkpKSkKKyAKKy0tIAorMi41NS4wCisKCmRpZmYgLS1naXQgYS9lbWFjcy5zcGVjIGIvZW1hY3Mu c3BlYwppbmRleCAwY2E5ZWI2Li5mMjAxNDhkIDEwMDY0NAotLS0gYS9lbWFjcy5zcGVjCisrKyBi L2VtYWNzLnNwZWMKQEAgLTc1LDYgKzc1LDEwIEBAIFBhdGNoOiAgICAgICAgIDAwMDItRmFsbC1i YWNrLXRvLXRoZS10ZXJtaW5hbC1mcm9tLXB1cmUtR1RLLXdoZW4tbm8tZGlzcC5wYXRjaAogIyBo dHRwczovL2RlYmJ1Z3MuZ251Lm9yZy9jZ2kvYnVncmVwb3J0LmNnaT9idWc9NDk1MDUjNjcKIFBh dGNoOiAgICAgICAgIDAwMDEtRG9uLXQtc3BlY2lmeS1TdGFydHVwV01DbGFzcy1pbi1lbWFjcy5k ZXNrdG9wLnBhdGNoCiAKKyMgRW1hY3MgYXJiaXRyYXJ5IGNvZGUgZXhlY3V0aW9uOiBpbmNvbXBs ZXRlIGZpeCBmb3IgQ1ZFLTIwMjQtNTM5MjAKKyMgaHR0cHM6Ly93d3cub3BlbndhbGwuY29tL2xp c3RzL29zcy1zZWN1cml0eS8yMDI2LzA5LzE0LzEKK1BhdGNoOiAgICAgICAgIDAwMDEtZmx5bWFr ZS5lbC1HZW5lcmFsaXplLXRydXN0ZWQtY29udGVudC1wLWNoZWNrLXRvLWFsbC5wYXRjaAorCiBC dWlsZFJlcXVpcmVzOiBhbHNhLWxpYi1kZXZlbAogQnVpbGRSZXF1aXJlczogYXRrLWRldmVsCiBC dWlsZFJlcXVpcmVzOiBhdXRvY29uZgo=