Re: Emacs 31 release-blocking bugs

Eshel Yaron [29/Jul  1:16pm +02] wrote:
> Sean Whitton <[email protected]> writes:
>> Eshel Yaron [28/Jul  6:52pm +02] wrote:
>>>
>>> Please consider waiting for some mitigation for the vulnerability Stefan
>>> described in bug#80574.
>>> It's a serious security concern, better fix it before the release.
>>
>> That bug is present in Emacs 30, so 31.1 release does not need to wait
>> on it.  As soon as we have a fix we are happy with we will do another
>> point release.
>
> Hmm...  There's an arbitrary code execution vulnerability that makes
> opening files with Emacs unsafe.  Indeed, it affects existing Emacs
> versions as well---that's a good reason to mitigate it ASAP and maybe
> provide a security fix for Emacs 30, but it wouldn't make sense to
> release another vulnerable version.
> ISTM that if anything is a release-blocker, this is it.

I don't understand your reasoning at all here.  We do not make the
situation worse by releasing Emacs 31.  Therefore the issues are not
interdependent.

-- 
Sean Whitton