Re: three vulnerabilities, in spell-check and linter pipe-reads, and in emergency-save path

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------4RyPCScCcPcpFWIi0XBD7NiU
Content-Type: multipart/mixed; boundary="------------07ofGmATe8DKS5CBWvpGowcL";
 protected-headers="v1"
From: Benno Schulenberg <[email protected]>
To: Paul Eggert <[email protected]>, [email protected], [email protected]
Cc: [email protected], Mike Frysinger <[email protected]>,
 Chris Allegretta <[email protected]>
Message-ID: <[email protected]>
Subject: Re: three vulnerabilities, in spell-check and linter pipe-reads, and
 in emergency-save path
References: <0100019e5d5d24b5-97a618dd-8802-48ce-81e4-4998e70f1857-000000@email.amazonses.com>
 <[email protected]>
 <[email protected]>
In-Reply-To: <[email protected]>

--------------07ofGmATe8DKS5CBWvpGowcL
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------07ofGmATe8DKS5CBWvpGowcL--

--------------4RyPCScCcPcpFWIi0XBD7NiU
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=yAa1
-----END PGP SIGNATURE-----

--------------4RyPCScCcPcpFWIi0XBD7NiU--