File CVE-2024-30203.patch of Package emacs.33336
From 937b9042ad7426acdcca33e3d931d8f495bdd804 Mon Sep 17 00:00:00 2001
From: Ihor Radchenko <yantar92@posteo.net>
Date: Tue, 20 Feb 2024 12:44:30 +0300
Subject: * lisp/gnus/mm-view.el (mm-display-inline-fontify): Mark contents
untrusted.
---
lisp/gnus/mm-view.el | 1 +
1 file changed, 1 insertion(+)
--- lisp/gnus/mm-view.el
+++ lisp/gnus/mm-view.el 2024-04-04 12:05:29.210225473 +0000
@@ -495,6 +495,7 @@ If MODE is not set, try to find mode aut
(with-current-buffer (generate-new-buffer "*fontification*")
(buffer-disable-undo)
(mm-enable-multibyte)
+ (setq untrusted-content t)
(insert (cond ((eq charset 'gnus-decoded)
(with-current-buffer (mm-handle-buffer handle)
(buffer-string)))