From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Nicolas Petton Newsgroups: gmane.emacs.devel Subject: [ANNOUNCE] Emacs 25.3 released Date: Mon, 11 Sep 2017 22:52:00 +0200 Message-ID: <87wp55t0un.fsf@petton.fr> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Trace: blaine.gmane.org 1505163198 9542 195.159.176.226 (11 Sep 2017 20:53:18 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Mon, 11 Sep 2017 20:53:18 +0000 (UTC) To: Emacs Devel , Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Sep 11 22:53:13 2017 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1drVhP-0001Q6-4M for ged-emacs-devel@m.gmane.org; Mon, 11 Sep 2017 22:52:55 +0200 Original-Received: from localhost ([::1]:60486 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1drVhW-0006QH-Hr for ged-emacs-devel@m.gmane.org; Mon, 11 Sep 2017 16:53:02 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:59145) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1drVgc-0006OK-CL for emacs-devel@gnu.org; Mon, 11 Sep 2017 16:52:07 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1drVgb-0005ja-Ac for emacs-devel@gnu.org; Mon, 11 Sep 2017 16:52:06 -0400 Original-Received: from petton.fr ([2a00:5884:8368::1]:56498) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1drVga-0005iu-TZ for emacs-devel@gnu.org; Mon, 11 Sep 2017 16:52:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=petton.fr; s=mail; t=1505163123; bh=HbinNFcoaJzPbdMnFDHYAt1UN0KH7ZVHbdMOpGeIlSI=; h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type; b=k6aBD8RgxfyYBHUVHxfVbZ86POlmuFsJIbp5rjGibwQS/2TLzcXg6SSglcHf76GptBlSUZ4ZfaJ5r3h5UV10Hl11S8ThUjORpa5aUnQFlGpv4JjZRORhB7siNirUcc9OBKiQTLEm7ORlvWBESo4oQMuQa3TRcznUNT/+pMz24B8= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a00:5884:8368::1 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:218103 Archived-At: --=-=-= Content-Type: text/plain Hi! Version 25.3 of the Emacs text editor is now available. For more information on Emacs, see: http://www.gnu.org/software/emacs You can retrieve the source from your nearest GNU mirror by using one of the following links: http://ftpmirror.gnu.org/emacs/emacs-25.3.tar.xz http://ftpmirror.gnu.org/emacs/emacs-25.3.tar.gz You can get the PGP signatures at http://ftp.gnu.org/gnu/emacs/emacs-25.3.tar.xz.sig http://ftp.gnu.org/gnu/emacs/emacs-25.3.tar.gz.sig You can choose a mirror explicitly from the list at: http://www.gnu.org/prep/ftp.html Mirrors may take some time to update; the main GNU ftp server is at: http://ftp.gnu.org/gnu/emacs/ This is an emergency release to fix a security vulnerability in Emacs. Enriched Text mode has its support for decoding 'x-display' disabled. This feature allows saving 'display' properties as part of text. Emacs 'display' properties support evaluation of arbitrary Lisp forms as part of instantiating the property, so decoding 'x-display' is vulnerable to executing arbitrary malicious Lisp code included in the text (e.g., sent as part of an email message). This vulnerability was introduced in Emacs 19.29. To work around that in Emacs versions before 25.3, append the following to your ~/.emacs init file: (eval-after-load "enriched" '(defun enriched-decode-display-prop (start end &optional param) (list start end))) Gnus no longer supports "richtext" and "enriched" inline MIME objects. This support was disabled to avoid evaluation of arbitrary Lisp code contained in email messages and news articles. Printed copies of the Emacs manual are available for purchase from the Free Software Foundation's online store at: http://shop.fsf.org/product/emacs-manual/ (The version on sale is updated for Emacs 24.2, but it remains a great reference book for current Emacs, and buying a copy is a great way to support the work of the FSF.) Regards, Nico --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEKNO+2FH986tX/vk8IzWHpHwgeRAFAlm293AACgkQIzWHpHwg eRBbGAf+LlIs5nxBz18cKnVOsINCxK71VJv+2JPZ01M0A8QY/5YmqnZyQ3GszKms haXWNGxjrXMcR3u0GHs3EXFLX7YxvSWKs9xfFueQWZ3dJZifpyWmIwqK4O3Cjljk BWQ4G3BonjAijkf+JjV/r8QL4EWVjYJWetxLh15+zbK08lS0znAYnLhkDvb0pWPJ eP+SX1hAOIppPJxtIppvcrTCEqoTIxPhjsibM2JzSnKu8hCGzZveS6Hh/4kn8wvh qVnZHiXTdqAJXiLPinQODoz34O+nmuyrUQo5Mnwpc+X5eLQjo8Gqm6CPLqoOZJh6 7D736/ampbcYC8GQIrplJqLXMd2tUQ== =vct8 -----END PGP SIGNATURE----- --=-=-=--