On Sat, Jun 22, 2024 at 06:15:02PM +0100, Kirill A. Korinsky wrote:
> Jeremie, ports@,
> 
> Here an update for emacs whcih contains security fix for org-mode.
> 
> Announce
>  - https://lists.gnu.org/archive/html/emacs-devel/2024-06/msg00695.html
>  - https://lists.gnu.org/archive/html/emacs-orgmode/2024-06/msg00397.html
> 
> Changes:
>  - https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/lisp/ol.el?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8
>  - https://github.com/emacs-mirror/emacs/commit/c645e1d8205f0f0663ec4a2d27575b238c646c7c

Thanks for pointing out the relevant security commit - I could make
sense to backport only this change - but there are other changes in
the code, doc and build infrastructure in that release, like in most
emacs security/bugfix releases.

> I guess it should be backported to stable as well.
> 
> Tested on -current/amd64 (and writing this email from an ipdate)

Did you actually test using the emacs-29.4 package installed on your
system?  Build fails here because upstream modified ack.texi after
regenerating emacs.info, and makeinfo from base can't regenerate
emacs.info.

I wonder how you managed to work around that.

> diff --git editors/emacs/Makefile editors/emacs/Makefile
> index ddda1843175..6479718eb2d 100644
> --- editors/emacs/Makefile
> +++ editors/emacs/Makefile
> @@ -1,6 +1,6 @@
>  COMMENT=		GNU editor: extensible, customizable, self-documenting
>  
> -VERSION=		29.3
> +VERSION=		29.4
>  DISTNAME=		emacs-${VERSION}
>  
>  CATEGORIES=		editors
> diff --git editors/emacs/distinfo editors/emacs/distinfo
> index 04fce952004..6462e1aeddf 100644
> --- editors/emacs/distinfo
> +++ editors/emacs/distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (emacs-29.3.tar.xz) = w0wF06zmZu2cf3oPrwcP6jIX/xkQ0ARJm9VFMjPXQqA=
> -SIZE (emacs-29.3.tar.xz) = 52203168
> +SHA256 (emacs-29.4.tar.xz) = uol5RvlMNmAKfnuzUB0nqkES15G/4URcYe0oVQ2sojU=
> +SIZE (emacs-29.4.tar.xz) = 52210344
> 
> 
> -- 
> wbr, Kirill
> 

-- 
jca