From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Drew Adams via "Bug reports for GNU Emacs, the Swiss army knife of text editors" Newsgroups: gmane.emacs.bugs Subject: bug#75017: 31.0.50; Untrusted user lisp files Date: Sun, 22 Dec 2024 18:47:49 +0000 Message-ID: References: <87bjx43gp7.fsf@pub.pink> <86h66w6yam.fsf@gnu.org> <86ikrb5zms.fsf@gnu.org> Reply-To: Drew Adams Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="18146"; mail-complaints-to="usenet@ciao.gmane.io" Cc: "acorallo@gnu.org" , "monnier@iro.umontreal.ca" , "jm@pub.pink" , "75017@debbugs.gnu.org" <75017@debbugs.gnu.org> To: Eli Zaretskii , Stefan Kangas Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sun Dec 22 19:49:17 2024 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tPR0u-0004ab-Jc for geb-bug-gnu-emacs@m.gmane-mx.org; Sun, 22 Dec 2024 19:49:17 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tPR0i-0006pz-I5; Sun, 22 Dec 2024 13:49:04 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tPR0h-0006pp-05 for bug-gnu-emacs@gnu.org; Sun, 22 Dec 2024 13:49:03 -0500 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tPR0g-0006ER-O9 for bug-gnu-emacs@gnu.org; Sun, 22 Dec 2024 13:49:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:In-Reply-To:References:Date:From:To:Subject; bh=EjrpdBCyXgSCmcokKRk4xw9h8qWMHfMdGI4glakge1Y=; b=tikM2teD8fGlsn1WJsGRUC6Kb/ccFuWnZtnfRgRLRmHYGEceEZFnecg5wVd7Ha/sSEQliVkWsSiKes9KHfqv8s1m6BVif93d9LZo6/k0B4PQqNHAFtnF4FrRi0PVEErGggTKKTzlPfkP33ZwWy5lIYTPcQIxy2X9gsMKlD0+Xx89SvhHY9V8CBUGtS6T+knVxwadfKQ6YfcKzIcE7eFAdsse288elZO/Mhx+6imbX7XJeVHOF9mv0/bpmwUj4IYbXwi5PguPBLoEmeDReShqEQr9a9iobWkwoVMQYSzkqrmcdzzs2dhxDBghNx4F7EM2cDRaGE73TC+AxQvmj3T4QQ==; Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1tPR0g-00037E-Aj for bug-gnu-emacs@gnu.org; Sun, 22 Dec 2024 13:49:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Drew Adams Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 22 Dec 2024 18:49:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 75017 X-GNU-PR-Package: emacs Original-Received: via spool by 75017-submit@debbugs.gnu.org id=B75017.173489329411907 (code B ref 75017); Sun, 22 Dec 2024 18:49:02 +0000 Original-Received: (at 75017) by debbugs.gnu.org; 22 Dec 2024 18:48:14 +0000 Original-Received: from localhost ([127.0.0.1]:51897 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tPQzt-00035z-Qk for submit@debbugs.gnu.org; Sun, 22 Dec 2024 13:48:14 -0500 Original-Received: from mx0b-00069f02.pphosted.com ([205.220.177.32]:25018) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tPQzr-00035q-9a for 75017@debbugs.gnu.org; Sun, 22 Dec 2024 13:48:12 -0500 Original-Received: from pps.filterd (m0246631.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 4BMCtsEr011336; Sun, 22 Dec 2024 18:48:09 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= corp-2023-11-20; bh=EjrpdBCyXgSCmcokKRk4xw9h8qWMHfMdGI4glakge1Y=; b= PkGaIDjeMm6w24PYzHl3/VLmW4PHIs+tLqJj+tnewKXVlFRXO4W4uXqbA6ancbzo MkBxtX351ysaWuRprRlo1zlI1Vl8XxZeuXiBlPQvgyu0vyn3XHZoZmhT37LCT9pj IQzd8sgF/Yqk6kQa9atp9nZ7U1VmYY2AvUExaL+SzwhOzpmKB/IRFYQJOB5PHcIl nH0lpMVkU1dLzSQ3m1lYzbv3qCWYLn3it3/kZueSAicYslkoMKse+ErLpXW9+bLC Rko4ca0NpJlrogtwjKlrDZCGaVzKQBiRwaixrNF/ZjKJeTVcDQsI7WMAgLO7LeOY 5gM6zDLchlnxyhtIMTPzDw== Original-Received: from phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com (phxpaimrmta01.appoci.oracle.com [138.1.114.2]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 43nq6s96hp-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Sun, 22 Dec 2024 18:48:09 +0000 (GMT) Original-Received: from pps.filterd (phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com [127.0.0.1]) by phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com (8.18.1.2/8.18.1.2) with ESMTP id 4BMDYmQ5020608; Sun, 22 Dec 2024 18:48:08 GMT Original-Received: from nam11-co1-obe.outbound.protection.outlook.com (mail-co1nam11lp2168.outbound.protection.outlook.com [104.47.56.168]) by phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com (PPS) with ESMTPS id 43nm469cyn-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Sun, 22 Dec 2024 18:48:08 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=oCPUdTSnzUGyi89epydfEuPBCxDtO760jphtniV4Xrg0hXcuQXanrzyw2yuPzul+Zek07zmPl1ONjWa9ute5xQq9apffvnbY2AdPH3xAfCPfCqIZ20zDvIAK8ERcOvdUGuR8PiERJHvzDVpK3pAayCEbGo7FZUtmOUiNjF4iqlSOKS8sSGc3lzah32V5HBD+cCoymF1ESdXHEB/pNaXjk7n7dK9zLcjjpCqel/NoHNczE9k7x/DZ0y+t54iWHAFPlEISvqyUc5iY1VCv2dT12nDyM6yqU9cnBejB1GiVJkrXt6PkfuXACYnMYq/EVRW+X1bs1447IPR3YeOi6VyVBg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=EjrpdBCyXgSCmcokKRk4xw9h8qWMHfMdGI4glakge1Y=; b=qWsduWoCHw5OVtKzJlH62KIjcpv7bx/BwVOGom5mvXAM/DygZfgG1CBT8JDmXfcGJVIpxb6a8Pr400y5g3ZEZOTc//TieQKDtI8C4ThR6C7Rdb3uqcgZuMI3TRF3Qy1LR1Tz7tpBB2A9dAR2+uk78Osi9oph5/sGmE9qZLJ5l9knsOISgWUkoLq1BiruCFRYIBYMg4wao95xNsicOvQvDApgVC5tSnURBjKrT7ifVCyqKhr7+dTLbxPsNsaA05Miejt/KrP9sVDj/kSeM+CWV+ItJI9q3TrTzGhB87qm5vjs6G7CAjDI8Q0zMNcqOWtEfeRnQl4HUtAbO7s6inbsdg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.onmicrosoft.com; s=selector2-oracle-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EjrpdBCyXgSCmcokKRk4xw9h8qWMHfMdGI4glakge1Y=; b=vCSI6kzMdRVSOwc0/wzfo8TL1L3y79ZKHjNef33DLjHPv1apIj6G+e8w9MkUi6TKWX3ndIYvbdaEvHuqAn8POkNFWy6YXgNHubvjKHeiEsncavXrmxb0CQHoi7w7ExqWklaVeJBk8UOYa2/nw9gFeFz+DnPmXJz89Vz765z4HcM= Original-Received: from DS7PR10MB5232.namprd10.prod.outlook.com (2603:10b6:5:3aa::24) by SN4PR10MB5622.namprd10.prod.outlook.com (2603:10b6:806:209::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8272.19; Sun, 22 Dec 2024 18:47:49 +0000 Original-Received: from DS7PR10MB5232.namprd10.prod.outlook.com ([fe80::8303:658f:14f8:2324]) by DS7PR10MB5232.namprd10.prod.outlook.com ([fe80::8303:658f:14f8:2324%5]) with mapi id 15.20.8272.013; Sun, 22 Dec 2024 18:47:49 +0000 Thread-Topic: [External] : bug#75017: 31.0.50; Untrusted user lisp files Thread-Index: AQHbVKFGWxTC27GyY0Kxav4Dx1QxjLLymYaQ In-Reply-To: <86ikrb5zms.fsf@gnu.org> Accept-Language: en-US Content-Language: en-US x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DS7PR10MB5232:EE_|SN4PR10MB5622:EE_ x-ms-office365-filtering-correlation-id: 4e17f43d-f5ed-4a61-ce8a-08dd22b9225b x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|366016|376014|1800799024|38070700018; x-microsoft-antispam-message-info: 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 BRC6rgPQ3eM0doQ+xsRkV2Xxk7Z6Q8cE5BJ6VWgxt0niu6YN/s1OKXxR4UMMlRx4oy1RB2syDmzfB2xjDhhT6FMcgdC2TOseWb x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DS7PR10MB5232.namprd10.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(366016)(376014)(1800799024)(38070700018); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: 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 kbDUKbUm48G6ffhQELL2uSWFJt0PPtB3PkzGeH9TTVxk9mJDm/q9AovbWZdbFHwqs1sNy53X4GwJ4Uc0TKHg37lBX0Vh859pth X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: oracle.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DS7PR10MB5232.namprd10.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4e17f43d-f5ed-4a61-ce8a-08dd22b9225b X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Dec 2024 18:47:49.6931 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: JxGNpWFq30iMOgV0RMe1GvEB2fZYHIf6MGVvs0R59c92O8kS6h2R9Hoei6lqzX87inxqTCLumyhArk+s8+CZfQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN4PR10MB5622 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1057,Hydra:6.0.680,FMLib:17.12.68.34 definitions=2024-12-22_08,2024-12-19_01,2024-11-22_01 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 mlxlogscore=780 mlxscore=0 suspectscore=0 malwarescore=0 adultscore=0 bulkscore=0 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2411120000 definitions=main-2412220173 X-Proofpoint-ORIG-GUID: hFDHTVAEB5tS8CxCBq7Xb9ryEwR7-DPf X-Proofpoint-GUID: hFDHTVAEB5tS8CxCBq7Xb9ryEwR7-DPf X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:297617 Archived-At: (Apologies for not following this thread.) If this is about Emacs claiming/suggesting that something is trusted or untrusted, I'd say we're better off saying only that Emacs CANNOT vouch for the thing to be trusted. That's better than claiming that something can't be trusted. And it's _much_ better than claiming that something _can_ be trusted.