From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Oliver To: git-commits@fedoraproject.org Subject: [rpms/emacs] f45: Prevent arbitrary code execution in flymake (rhbz#2537390). Date: Wed, 23 Sep 2026 14:46:57 GMT Message-ID: <179017481791.1.3457319410066528333.rpms-emacs-78cdbd0007db@fedoraproject.org> List-ID: X-Git-Repo: rpms/emacs X-Git-Branch: f45 X-Git-Rev: 78cdbd0007dbdb50e810cb1c4d60bb8f5da084f4 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZW1hY3MKQnJhbmNo IDogZjQ1CkNvbW1pdCA6IDc4Y2RiZDAwMDdkYmRiNTBlODEwY2IxYzRkNjBiYjhmNWRhMDg0ZjQK QXV0aG9yIDogUGV0ZXIgT2xpdmVyIDxnaXRAbWF2aXQub3JnLnVrPgpEYXRlICAgOiAyMDI2LTA5 LTIzVDEzOjAyOjMyKzAxOjAwClN0YXRzICA6ICs2MC8tMCBpbiAyIGZpbGUocykKVVJMICAgIDog aHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9lbWFjcy9jLzc4Y2RiZDAwMDdkYmRi NTBlODEwY2IxYzRkNjBiYjhmNWRhMDg0ZjQ/YnJhbmNoPWY0NQoKTG9nOgpQcmV2ZW50IGFyYml0 cmFyeSBjb2RlIGV4ZWN1dGlvbiBpbiBmbHltYWtlIChyaGJ6IzI1MzczOTApLgoKLS0tCmRpZmYg LS1naXQgYS8wMDAxLWZseW1ha2UuZWwtR2VuZXJhbGl6ZS10cnVzdGVkLWNvbnRlbnQtcC1jaGVj ay10by1hbGwucGF0Y2ggYi8wMDAxLWZseW1ha2UuZWwtR2VuZXJhbGl6ZS10cnVzdGVkLWNvbnRl bnQtcC1jaGVjay10by1hbGwucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uMjk2YWZkMQotLS0gL2Rldi9udWxsCisrKyBiLzAwMDEtZmx5bWFrZS5lbC1HZW5lcmFsaXpl LXRydXN0ZWQtY29udGVudC1wLWNoZWNrLXRvLWFsbC5wYXRjaApAQCAtMCwwICsxLDU2IEBACitG cm9tIGFiYzgwMmVlMmViMGIxNjYzMzQ5ZGRmMjJhNDYxZjhlNTRhMzgzZmIgTW9uIFNlcCAxNyAw MDowMDowMCAyMDAxCitGcm9tOiBTdGVmYW4gTW9ubmllciA8bW9ubmllckBpcm8udW1vbnRyZWFs LmNhPgorRGF0ZTogTW9uLCAxNCBTZXAgMjAyNiAxMTozMDozOSArMDEwMAorU3ViamVjdDogW1BB VENIXSBmbHltYWtlLmVsOiBHZW5lcmFsaXplIHRydXN0ZWQtY29udGVudC1wIGNoZWNrIHRvIGFs bAorIGJhY2tlbmRzCisKK01pbmltYWwgc2FmZSBiYWNrcG9ydCBvZiB0aGlzIGNoYW5nZToKKwor ICAgIEF1dGhvcjogICAgIFN0ZWZhbiBNb25uaWVyIDxtb25uaWVyQGlyby51bW9udHJlYWwuY2E+ CisgICAgQXV0aG9yRGF0ZTogRnJpIFNlcCAxMSAyMTo0ODo1NSAyMDI2IC0wNDAwCisKKyAgICAg IGZseW1ha2UuZWw6IEdlbmVyYWxpemUgdHJ1c3RlZC1jb250ZW50LXAgY2hlY2sgdG8gYWxsIGJh Y2tlbmRzCisKKyAgICAgIFJhdGhlciB0aGFuIGhhdmUgZWFjaCBhbmQgZXZlcnkgYmFja2VuZCBj aGVjaworICAgICAgJ3RydXN0ZWQtY29udGVudC1wJyBpZiBpdCBmZWVscyBuZWNlc3NhcnksIGlt cGxlbWVudCB0aGUgY2hlY2sKKyAgICAgIG9uY2UgYW5kIGZvcmFsbCBpbiBmbHltYWtlLmVsIGFu ZCBwcm92aWRlIGEgd2F0IGZvciBiYWNrZW5kcyB0bworICAgICAgc2tpcCB0aGF0IHRlc3QsIHNv IHdlIHJlcGxhY2UgYW4gIm9wdC1pbiIgd2l0aCBhbiAib3B0LW91dCIKKyAgICAgIHRoYXQncyBh IGJpdCBtb3JlIHNlY3VyZSBieSBkZXNpZ24uCisKKyAgICAgICogbGlzcC9wcm9nbW9kZXMvZWxp c3AtbW9kZS5lbCAoZWxpc3AtZmx5bWFrZS1ieXRlLWNvbXBpbGUpOgorICAgICAgTW92ZSAndHJ1 c3RlZC1jb250ZW50LXAnIHRvIGZseW1ha2UuZWwuCisgICAgICAqIGxpc3AvcHJvZ21vZGVzL2Zs eW1ha2UuZWwgKGZseW1ha2UtLXJ1bi1iYWNrZW5kKToKKyAgICAgIE1vdmUgJ3RydXN0ZWQtY29u dGVudC1wJyBmcm9tIGVsaXNwLW1vZGUuZWwuCisKKyAgICAgICogbGlzcC9wcm9nbW9kZXMvZWds b3QuZWwgKGVnbG90LWZseW1ha2UtYmFja2VuZCk6IE1hcmsgYXMgc2FmZS4KKworKiBsaXNwL3By b2dtb2Rlcy9mbHltYWtlLmVsIChmbHltYWtlLS1ydW4tYmFja2VuZCk6IENvcHkKK3RydXN0ZWQt Y29udGVudC1wIGNoZWNrIGZyb20gZWxpc3AtbW9kZS5lbC4gIERvIG5vdCBtZXJnZSB0bworbWFz dGVyLgorLS0tCisgbGlzcC9wcm9nbW9kZXMvZmx5bWFrZS5lbCB8IDkgKysrKysrKy0tCisgMSBm aWxlIGNoYW5nZWQsIDcgaW5zZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdp dCBhL2xpc3AvcHJvZ21vZGVzL2ZseW1ha2UuZWwgYi9saXNwL3Byb2dtb2Rlcy9mbHltYWtlLmVs CitpbmRleCBmZmY0MjY5Njc2MS4uNDA3NjEwMzFkYzIgMTAwNjQ0CistLS0gYS9saXNwL3Byb2dt b2Rlcy9mbHltYWtlLmVsCisrKysgYi9saXNwL3Byb2dtb2Rlcy9mbHltYWtlLmVsCitAQCAtMTI3 MSw4ICsxMjcxLDEzIEBAIGZseW1ha2UtLXJ1bi1iYWNrZW5kCisgICAgICAgICAgICAgKGZseW1h a2UtLXN0YXRlLWRpc2FibGVkIHN0YXRlKSBuaWwKKyAgICAgICAgICAgICAoZmx5bWFrZS0tc3Rh dGUtcmVwb3J0ZWQtcCBzdGF0ZSkgbmlsKSkKKyAgICAgKGNvbmRpdGlvbi1jYXNlLXVubGVzcy1k ZWJ1ZyBlcnIKKy0gICAgICAgIChhcHBseSBiYWNrZW5kIChmbHltYWtlLW1ha2UtcmVwb3J0LWZu IGJhY2tlbmQgcnVuLXRva2VuKQorLSAgICAgICAgICAgICAgIGFyZ3MpCisrICAgICAgICAoaWYg KG9yICh0cnVzdGVkLWNvbnRlbnQtcCkgKGZ1bmN0aW9uLWdldCBiYWNrZW5kICdmbHltYWtlLWFs d2F5cy1zYWZlKSkKKysgICAgICAgICAgICAoYXBwbHkgYmFja2VuZCAoZmx5bWFrZS1tYWtlLXJl cG9ydC1mbiBiYWNrZW5kIHJ1bi10b2tlbikKKysgICAgICAgICAgICAgICAgICAgYXJncykKKysg ICAgICAgICAgKG1lc3NhZ2UgIkRpc2FibGluZyAlUyBpbiAlcyAodW50cnVzdGVkIGNvbnRlbnQp IgorKyAgICAgICAgICAgICAgICAgICBiYWNrZW5kIChidWZmZXItbmFtZSkpCisrICAgICAgICAg ICh1c2VyLWVycm9yICJEaXNhYmxpbmcgJVMgaW4gJXMgKHVudHJ1c3RlZCBjb250ZW50KSIKKysg ICAgICAgICAgICAgICAgICAgICAgYmFja2VuZCAoYnVmZmVyLW5hbWUpKSkKKyAgICAgICAoZXJy b3IKKyAgICAgICAgKGZseW1ha2UtLWRpc2FibGUtYmFja2VuZCBiYWNrZW5kIGVycikpKSkpCisg CistLSAKKzIuNTUuMAorCgpkaWZmIC0tZ2l0IGEvZW1hY3Muc3BlYyBiL2VtYWNzLnNwZWMKaW5k ZXggMGNhOWViNi4uZjIwMTQ4ZCAxMDA2NDQKLS0tIGEvZW1hY3Muc3BlYworKysgYi9lbWFjcy5z cGVjCkBAIC03NSw2ICs3NSwxMCBAQCBQYXRjaDogICAgICAgICAwMDAyLUZhbGwtYmFjay10by10 aGUtdGVybWluYWwtZnJvbS1wdXJlLUdUSy13aGVuLW5vLWRpc3AucGF0Y2gKICMgaHR0cHM6Ly9k ZWJidWdzLmdudS5vcmcvY2dpL2J1Z3JlcG9ydC5jZ2k/YnVnPTQ5NTA1IzY3CiBQYXRjaDogICAg ICAgICAwMDAxLURvbi10LXNwZWNpZnktU3RhcnR1cFdNQ2xhc3MtaW4tZW1hY3MuZGVza3RvcC5w YXRjaAogCisjIEVtYWNzIGFyYml0cmFyeSBjb2RlIGV4ZWN1dGlvbjogaW5jb21wbGV0ZSBmaXgg Zm9yIENWRS0yMDI0LTUzOTIwCisjIGh0dHBzOi8vd3d3Lm9wZW53YWxsLmNvbS9saXN0cy9vc3Mt c2VjdXJpdHkvMjAyNi8wOS8xNC8xCitQYXRjaDogICAgICAgICAwMDAxLWZseW1ha2UuZWwtR2Vu ZXJhbGl6ZS10cnVzdGVkLWNvbnRlbnQtcC1jaGVjay10by1hbGwucGF0Y2gKKwogQnVpbGRSZXF1 aXJlczogYWxzYS1saWItZGV2ZWwKIEJ1aWxkUmVxdWlyZXM6IGF0ay1kZXZlbAogQnVpbGRSZXF1 aXJlczogYXV0b2NvbmYK