Re: Fixing security vulnerabilities before new releases
Eli Zaretskii <[email protected]> Tue, 04 Aug 2026 16:08:53 +0300
| Newsgroups | gmane.emacs.devel |
|---|---|
| Message-ID | <[email protected]> |
> From: Sean Whitton <[email protected]> > Cc: [email protected], [email protected], [email protected], > [email protected] > Date: Tue, 04 Aug 2026 13:48:04 +0100 > > Eli Zaretskii [03/Aug 8:33pm +03] wrote: > >> From: Sean Whitton <[email protected]> > >> Cc: [email protected], [email protected], [email protected] > >> Date: Mon, 03 Aug 2026 16:58:51 +0100 > >> > >> Eli Zaretskii [02/Aug 7:38am +03] wrote: > >> > I'm okay with the changes proposed by Eshel, but not with introduction > >> > of intern--without-shorthands. > >> > >> So, I think we are in agreement about the minimal fix in two places? > > > > I'm okay with that, yes. > > > >> Shall we release it to distros ~2 weeks before we commit it? > > > > How will that be useful? > > One of the vulnerable places isn't yet public knowledge. Distros could > roll out a patch to users before that threat is revealed. <Shrug> I don't mind.