Bug 296546 - editors/emacs: Fix CVE-2026-6861
Summary: editors/emacs: Fix CVE-2026-6861
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: emacs@FreeBSD.org (Nobody)
URL: https://debbugs.gnu.org/cgi/bugreport...
Keywords:
Depends on:
Blocks:
 
Reported: 2026-07-06 01:23 UTC by Kousuke Kannagi
Modified: 2026-07-06 12:45 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (emacs)

Attachments
Fix CVE-2026-6861 (1.67 KB, patch)
2026-07-06 01:23 UTC, Kousuke Kannagi 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kousuke Kannagi freebsd_committer freebsd_triage 2026-07-06 01:23:00 UTC 
Created attachment 272529 [details]
Fix CVE-2026-6861
Comment 1 commit-hook freebsd_committer freebsd_triage 2026-07-06 04:28:57 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=915d199e510d37e924567bbe2740fbb8ebd0a313

commit 915d199e510d37e924567bbe2740fbb8ebd0a313
Author:     Kousuke Kannagi <mce@FreeBSD.org>
AuthorDate: 2026-07-06 02:53:48 +0000
Commit:     Joseph Mingrone <jrm@FreeBSD.org>
CommitDate: 2026-07-06 04:27:50 +0000

    editors/emacs: Fix CVE-2026-6861

    Upstream bug:   https://debbugs.gnu.org/cgi/bugreport.cgi?bug=80851
    PR:             296546
    Reviewed by:    jrm
    Security:       CVE-2026-6861

 editors/emacs/Makefile                      |  2 +-
 editors/emacs/files/patch-src_image.c (new) | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)
Comment 2 commit-hook freebsd_committer freebsd_triage 2026-07-06 04:28:57 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=28960ffb038844f0a1498e39a4f3060ba0e08381

commit 28960ffb038844f0a1498e39a4f3060ba0e08381
Author:     Joseph Mingrone <jrm@FreeBSD.org>
AuthorDate: 2026-07-06 04:15:29 +0000
Commit:     Joseph Mingrone <jrm@FreeBSD.org>
CommitDate: 2026-07-06 04:27:51 +0000

    security/vuxml: Document Emacs vulnerability

    PR:             296546
    Security:       CVE-2026-6861
    Sponsored by:   The FreeBSD Foundation

 security/vuxml/vuln/2026.xml | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
Comment 3 Joseph Mingrone freebsd_committer freebsd_triage 2026-07-06 04:29:23 UTC 
Thanks.  Committed with a few changes.

1. Restored the distinfo entries for canna
2. Since it's just a change of a few characters, use a local patch.