[SECURITY] Fedora 15 Update: emacs-23.3-8.fc15

updates at fedoraproject.org updates at fedoraproject.org
Mon Jan 23 21:57:25 UTC 2012


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0462
2012-01-14 03:36:32
--------------------------------------------------------------------------------

Name        : emacs
Product     : Fedora 15
Version     : 23.3
Release     : 8.fc15
URL         : http://www.gnu.org/software/emacs/
Summary     : GNU Emacs text editor
Description :
Emacs is a powerful, customizable, self-documenting, modeless text
editor. Emacs contains special code editing features, a scripting
language (elisp), and the capability to read mail, news, and more
without leaving the editor.

This package provides an emacs binary with support for X windows.

--------------------------------------------------------------------------------
Update Information:

CVE-2012-0035 emacs: CEDET global-ede-mode file loading vulnerability
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 12 2012 Karel Klíč <kklic at redhat.com> - 1:23.3-8
- Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)
- Check for _NET_WM_STATE_HIDDEN (rhbz#711739)
* Thu Jun 30 2011 Ville Skyttä <ville.skytta at iki.fi> - 1:23.3-7
- Use custom-set-variables for customizable variables in .emacs (#716440).
- Move frame-title-format default from .emacs to default.el (#716443).
* Thu May 26 2011 Karel Klíč <kklic at redhat.com> - 1:23.3-6
- Enumerate binaries in emacs-common to avoid packaging single binary
  multiple times by accident
* Mon May 23 2011 Karel Klíč <kklic at redhat.com> - 1:23.3-5
- Removed %defattr from %files sections, as RPM no longer needs it
- Removed %dir %{_libexecdir}/emacs and similar from emacs and
  emacs-nox packages, as the directories are used and present only in
  emacs-common (rhbz#704067)
* Tue Mar 22 2011 Karel Klic <kklic at redhat.com> - 1:23.3-4
- Rebuild to fix an RPM issue (rhbz689182)
* Tue Mar 15 2011 Ville Skyttä <ville.skytta at iki.fi> - 1:23.3-3
- Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
- Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)
* Tue Mar 15 2011 Karel Klic <kklic at redhat.com> - 1:23.3-2
- Another attempt to fix the handling of alternatives (rhbz#684447)
  The current process loses alternatives preference on every upgrade,
  but there seems to be no elegant way how to prevent this while
  having versioned binaries (/bin/emacs-%{version}) at the same time.
- Removed 'rm -rf %{buildroot}' from %install section
* Thu Mar 10 2011 Karel Klic <kklic at redhat.com> - 1:23.3-1
- New upstream release
- Depend on util-linux directly, as the package no longer provides setarch
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1:23.2-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #773023 - CVE-2012-0035 emacs: CEDET global-ede-mode file loading vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=773023
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update emacs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list