Re: Emacs 31 release-blocking bugs

Sean Whitton <[email protected]> writes:
> Eshel Yaron [28/Jul  6:52pm +02] wrote:
>>
>> Please consider waiting for some mitigation for the vulnerability Stefan
>> described in bug#80574.
>> It's a serious security concern, better fix it before the release.
>
> That bug is present in Emacs 30, so 31.1 release does not need to wait
> on it.  As soon as we have a fix we are happy with we will do another
> point release.

Hmm...  There's an arbitrary code execution vulnerability that makes
opening files with Emacs unsafe.  Indeed, it affects existing Emacs
versions as well---that's a good reason to mitigate it ASAP and maybe
provide a security fix for Emacs 30, but it wouldn't make sense to
release another vulnerable version.
ISTM that if anything is a release-blocker, this is it.


Eshel