Re: Fixing security vulnerabilities before new releases

Sean Whitton <[email protected]> Tue, 04 Aug 2026 13:48:04 +0100
Newsgroups gmane.emacs.devel
Message-ID <[email protected]>
Eli Zaretskii [03/Aug  8:33pm +03] wrote:
>> From: Sean Whitton <[email protected]>
>> Cc: [email protected], [email protected], [email protected]
>> Date: Mon, 03 Aug 2026 16:58:51 +0100
>>
>> Eli Zaretskii [02/Aug  7:38am +03] wrote:
>> > I'm okay with the changes proposed by Eshel, but not with introduction
>> > of intern--without-shorthands.
>>
>> So, I think we are in agreement about the minimal fix in two places?
>
> I'm okay with that, yes.
>
>> Shall we release it to distros ~2 weeks before we commit it?
>
> How will that be useful?

One of the vulnerable places isn't yet public knowledge.  Distros could
roll out a patch to users before that threat is revealed.

-- 
Sean Whitton