From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: Fwd: Re: [oss-security] GNU Emacs 25.2 enriched text remote code execution Date: Wed, 13 Sep 2017 17:46:26 +0300 Message-ID: <83zi9yodvh.fsf@gnu.org> References: <87mv5zzt6n.fsf@mid.deneb.enyo.de> <87fubrxk2s.fsf@Niukka.kon.iki.fi> <95585f8b-3c15-1dd0-6af7-d28a743ebf0d@cs.ucla.edu> Reply-To: Eli Zaretskii NNTP-Posting-Host: blaine.gmane.org X-Trace: blaine.gmane.org 1505314024 24735 195.159.176.226 (13 Sep 2017 14:47:04 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 13 Sep 2017 14:47:04 +0000 (UTC) Cc: kon@iki.fi, emacs-devel@gnu.org To: Paul Eggert Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Sep 13 16:46:49 2017 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ds8wD-00067F-CM for ged-emacs-devel@m.gmane.org; Wed, 13 Sep 2017 16:46:49 +0200 Original-Received: from localhost ([::1]:42941 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ds8wK-0001I0-C9 for ged-emacs-devel@m.gmane.org; Wed, 13 Sep 2017 10:46:56 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:46125) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ds8w5-0001FB-No for emacs-devel@gnu.org; Wed, 13 Sep 2017 10:46:42 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ds8w1-0005nH-Qy for emacs-devel@gnu.org; Wed, 13 Sep 2017 10:46:41 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:46921) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ds8w1-0005nB-O0; Wed, 13 Sep 2017 10:46:37 -0400 Original-Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3572 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1ds8vz-0001vb-O7; Wed, 13 Sep 2017 10:46:37 -0400 In-reply-to: <95585f8b-3c15-1dd0-6af7-d28a743ebf0d@cs.ucla.edu> (message from Paul Eggert on Wed, 13 Sep 2017 01:56:04 -0700) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:218189 Archived-At: > From: Paul Eggert > Date: Wed, 13 Sep 2017 01:56:04 -0700 > Cc: Emacs development discussions > > Kalle Olavi Niemitalo wrote: > > eval-after-load in Emacs 21.3 says "FILE must match exactly." > > In that case, the mitigation strategy published in etc/NEWS is not sufficient, > and we should go back to the method that says (require 'enriched) first. I'll do > that if nobody has a better suggestion. I only have 21.4, and there the recipe in the 25.3 NEWS works. Can we please see the exact recipe tried in Emacs 21.3 and its results? Thanks.