From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: Request to backport fix for CVE-2022-45939 to Emacs 28 Date: Sun, 19 Feb 2023 09:05:14 +0200 Message-ID: <83edqmxhhx.fsf@gnu.org> References: <85f35c42-cfe8-44a7-a9c1-307acc5c17d4@Spark> <09998122-0110-454f-94d1-e29c37b833f4@Spark> <83sff9e1is.fsf@gnu.org> <838rh0e64j.fsf@gnu.org> <86ttzougu2.fsf@gmail.com> <83cz692xav.fsf@gnu.org> Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="36847"; mail-complaints-to="usenet@ciao.gmane.io" Cc: theophilusx@gmail.com, emacs-devel@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sun Feb 19 08:06:05 2023 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pTdlt-0009KN-C9 for ged-emacs-devel@m.gmane-mx.org; Sun, 19 Feb 2023 08:06:05 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pTdlB-0004Uc-JG; Sun, 19 Feb 2023 02:05:21 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTdlA-0004US-0Z for emacs-devel@gnu.org; Sun, 19 Feb 2023 02:05:20 -0500 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTdl9-0002NX-BA; Sun, 19 Feb 2023 02:05:19 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=jKslF67nQd19dWhUlR++Sk9y20HvAWMTSP4jCrZ//oQ=; b=lpIjvv/VVX60 9r7+mE7fpfO9JaiKkhLTyYtWMFE8mAWhVALGD4k50HSKoFW03Hz0PSobt5m2GYLWyY4oX078Dt+IT UmbbSQb/TEZlIU3l5DIz7r4P22h0alVL8sqDOK5q7Nr+oSFULQ4RyRzhfKaO8OoksUna/ctkL6o7A mnBAJQqpigyn0ZpL172xxJHeGx1IT2xe9LbzsY43J9/0jpnfgZ7A1YzOluI9jnv2G0QxXNjED7Rty vVyBy/CRbXBIlPLAG0fdqHzz2YMam9MiS3PCfo5WpT9h8ebQAoJUYYgIRtvAjtLRTCRSZJCiNrFiG +iJSrPmLPwuL5JfKb0tJ2Q==; Original-Received: from [87.69.77.57] (helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTdkz-0004XJ-Gu; Sun, 19 Feb 2023 02:05:09 -0500 In-Reply-To: (message from Richard Stallman on Sat, 18 Feb 2023 23:47:57 -0500) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.devel:303540 Archived-At: > From: Richard Stallman > Cc: theophilusx@gmail.com, emacs-devel@gnu.org > Date: Sat, 18 Feb 2023 23:47:57 -0500 > > > The whole process takes a non-trivial amount of work. It is described > > in make-tarball.txt. If someone wants to do it, they are welcome. > > The steps all need to be done, but what makes them nontrivial is that > normally some of them will run into snags that require nontrivial > corrections. > > Maybe it would be good to do this in a Shell buffer and save the > typescript, so a more experienced persion can verify it was done > right. That's not the main aspect that makes this nontrivial. Many steps described in make-tarball.txt require that a human eyeballs the results of some commands and/or messages from some commands, and fixes any problems that need fixing. The process of examining and the decision which ones are "worth fixing" is what takes time and effort, and logging what was done in one case makes the next one no easier. Another non-trivial part is updating the manuals on the Web site. The procedure we use for building the manuals is very fragile and tends to break with every new Texinfo release. Anyway, this is all moot point now, since Stefan Kangas already did the job (for which I thank him again).