diff options
author | Mikael Brockman <mikael@brockman.se> | 2017-09-12 09:43:50 +0300 |
---|---|---|
committer | Mikael Brockman <mikael@brockman.se> | 2017-09-12 09:45:02 +0300 |
commit | 78f457c76c5f8067ad07447779f0a8f7a13a56d2 (patch) | |
tree | e6a2c3435bf8ce4368d1477aee1c7c8f5a44ccc1 /pkgs/applications/editors/emacs | |
parent | ca449e93ea8c661c29c438a7eff3d30b3a854271 (diff) |
emacs: 25.2 -> 25.3
https://lists.gnu.org/archive/html/emacs-devel/2017-09/msg00211.html > This is an emergency release to fix a security vulnerability in Emacs. > > Enriched Text mode has its support for decoding 'x-display' disabled. > This feature allows saving 'display' properties as part of text. > Emacs 'display' properties support evaluation of arbitrary Lisp forms > as part of instantiating the property, so decoding 'x-display' is > vulnerable to executing arbitrary malicious Lisp code included in the > text (e.g., sent as part of an email message).
Diffstat (limited to 'pkgs/applications/editors/emacs')
-rw-r--r-- | pkgs/applications/editors/emacs/default.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/pkgs/applications/editors/emacs/default.nix b/pkgs/applications/editors/emacs/default.nix index c51227bbc6f77..a00826b982141 100644 --- a/pkgs/applications/editors/emacs/default.nix +++ b/pkgs/applications/editors/emacs/default.nix @@ -26,12 +26,12 @@ let in stdenv.mkDerivation rec { name = "emacs-${version}${versionModifier}"; - version = "25.2"; + version = "25.3"; versionModifier = ""; src = fetchurl { url = "mirror://gnu/emacs/${name}.tar.xz"; - sha256 = "1ykkq0xl28ljdg61bm6gzy04ww86ajms98gix72qg6cpr6a53dar"; + sha256 = "02y00y9q42g1iqgz5qhmsja75hwxd88yrn9zp14lanay0zkwafi5"; }; patches = (lib.optional stdenv.isDarwin ./at-fdcwd.patch); |