Re: Fixing security vulnerabilities before new releases

Eli Zaretskii <[email protected]> Tue, 04 Aug 2026 16:08:53 +0300
Newsgroups gmane.emacs.devel
Message-ID <[email protected]>
> From: Sean Whitton <[email protected]>
> Cc: [email protected], [email protected], [email protected],
>  [email protected]
> Date: Tue, 04 Aug 2026 13:48:04 +0100
> 
> Eli Zaretskii [03/Aug  8:33pm +03] wrote:
> >> From: Sean Whitton <[email protected]>
> >> Cc: [email protected], [email protected], [email protected]
> >> Date: Mon, 03 Aug 2026 16:58:51 +0100
> >>
> >> Eli Zaretskii [02/Aug  7:38am +03] wrote:
> >> > I'm okay with the changes proposed by Eshel, but not with introduction
> >> > of intern--without-shorthands.
> >>
> >> So, I think we are in agreement about the minimal fix in two places?
> >
> > I'm okay with that, yes.
> >
> >> Shall we release it to distros ~2 weeks before we commit it?
> >
> > How will that be useful?
> 
> One of the vulnerable places isn't yet public knowledge.  Distros could
> roll out a patch to users before that threat is revealed.

<Shrug> I don't mind.