From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Emanuel Berg Newsgroups: gmane.emacs.help Subject: Re: CVE-2017-14482 - Red Hat Customer Portal Date: Sun, 24 Sep 2017 08:31:45 +0200 Organization: Aioe.org NNTP Server Message-ID: <86wp4oa9pq.fsf@zoho.com> References: <2e991bb7-c570-49ce-be94-3654945bb4b5@mousecar.com> <87d16jxjz6.fsf@eps142.cdf.udc.es> <861smzcgx3.fsf@zoho.com> <1b3bec6e-d4d5-37a7-ba54-49bd2d8281bd@yandex.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506234938 16343 195.159.176.226 (24 Sep 2017 06:35:38 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sun, 24 Sep 2017 06:35:38 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4 (gnu/linux) To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Sun Sep 24 08:35:34 2017 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dw0Vn-0003fW-G9 for geh-help-gnu-emacs@m.gmane.org; Sun, 24 Sep 2017 08:35:31 +0200 Original-Received: from localhost ([::1]:37061 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dw0Vr-000274-Q4 for geh-help-gnu-emacs@m.gmane.org; Sun, 24 Sep 2017 02:35:35 -0400 Original-Path: usenet.stanford.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!news.redatomik.org!aioe.org!.POSTED!not-for-mail Original-Newsgroups: gnu.emacs.help Original-Lines: 14 Original-NNTP-Posting-Host: XiPr5pdukK7aCRjr/wfS1Q.user.gioia.aioe.org Original-X-Complaints-To: abuse@aioe.org Cancel-Lock: sha1:G/VC4YsHrppylNXsscb2stWSpqA= X-Notice: Filtered by postfilter v. 0.8.2 Mail-Copies-To: never Original-Xref: usenet.stanford.edu gnu.emacs.help:220268 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:114374 Archived-At: Charles A. Roelli wrote: > The code that caused CVE-2017-14482 (aka > Bug#28350) was 100% correct. It was also far > too powerful, so its behavior had to be > properly limited. There is no way to find such > a "bug" without reading the code and trying to > understand its use. Agree 100% -- underground experts united http://user.it.uu.se/~embe8573