On Tue, 2025-03-04 at 00:54 +0000, Peter Oliver wrote: > On Mon, 3 Mar 2025, Michel Lind wrote: > > > we should probably > > - also update F41 and F40? > > An exception to the updates policy has been requested, to rebase > Fedora 41 and 40 to Emacs 30. https://pagure.io/fesco/issue/3369 > Thanks! I have not had time to go through my FESCo queue, will chime in there. > > <-- happy to prepare PRs if that helps speed things along > > Notice that the FreeBSD package maintainer has asked the Emacs > developers > what commits are sufficient to fix CVEs 2024-53920 and 2025-1244, but > has > not yet received a reply. Yeah.. as far as Fedora is concerned rebasing is probably less troublesome than trying to figure out which patch to cherry-pick. FWIW this is what CentOS Stream 9 uses, so likely what is in the RHEL 9 errata as well: https://gitlab.com/redhat/centos-stream/rpms/emacs/-/commit/8e595a514f20e03f11232fd50dbb01bd867266c5 It seems to fix only the 2025-1244 CVE and left 2024-53920 unaddressed. -- _o) Michel Lind _( ) identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 README: https://fedoraproject.org/wiki/User:Salimma#README -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
