From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Bob Proulx Newsgroups: gmane.emacs.help Subject: Re: CVE-2017-14482 - Red Hat Customer Portal Date: Sat, 23 Sep 2017 14:27:59 -0600 Message-ID: <20170923141649782344236@bob.proulx.com> References: <2e991bb7-c570-49ce-be94-3654945bb4b5@mousecar.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: blaine.gmane.org 1506198513 24990 195.159.176.226 (23 Sep 2017 20:28:33 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sat, 23 Sep 2017 20:28:33 +0000 (UTC) User-Agent: NeoMutt/20170609 (1.8.3) To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Sat Sep 23 22:28:29 2017 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dvr2K-00067b-9B for geh-help-gnu-emacs@m.gmane.org; Sat, 23 Sep 2017 22:28:28 +0200 Original-Received: from localhost ([::1]:36011 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dvr2P-0006mD-QS for geh-help-gnu-emacs@m.gmane.org; Sat, 23 Sep 2017 16:28:33 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:47854) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dvr1v-0006m7-CH for help-gnu-emacs@gnu.org; Sat, 23 Sep 2017 16:28:04 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dvr1s-0008O5-9I for help-gnu-emacs@gnu.org; Sat, 23 Sep 2017 16:28:03 -0400 Original-Received: from havoc.proulx.com ([96.88.95.61]:46983) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dvr1s-0008Nu-3S for help-gnu-emacs@gnu.org; Sat, 23 Sep 2017 16:28:00 -0400 Original-Received: from joseki.proulx.com (localhost [127.0.0.1]) by havoc.proulx.com (Postfix) with ESMTP id A4B2F337 for ; Sat, 23 Sep 2017 14:27:59 -0600 (MDT) Original-Received: from hysteria.proulx.com (hysteria.proulx.com [192.168.230.119]) by joseki.proulx.com (Postfix) with ESMTP id 744C521241 for ; Sat, 23 Sep 2017 14:27:59 -0600 (MDT) Original-Received: by hysteria.proulx.com (Postfix, from userid 1000) id 610442DC5D; Sat, 23 Sep 2017 14:27:59 -0600 (MDT) Mail-Followup-To: help-gnu-emacs@gnu.org Content-Disposition: inline In-Reply-To: <2e991bb7-c570-49ce-be94-3654945bb4b5@mousecar.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 96.88.95.61 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:114368 Archived-At: ken wrote: > Many people, including myself, have systems with package managers... which > have dependencies... all of which make upgrading outside of package > management unfeasible. That's great! Using distributions with security teams much simplifies things for the end user. Otherwise every user would need to closely follow each and every one of the zillion software projects installed on their system. Software packaging makes this simpler. In which case the best answer for people using pre-packaged emacs is to install the security upgrade from their distribution which includes the fix. Spot checking things now (some days later) and it looks like the major distributions I looked at have already released fixed versions available for people using those distros to install. Just upgrade to them. Life is good! Bob