emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: emacs-29 3c1693d08b0: Fix Elisp code injection vulnerability in emac


From: Ulrich Mueller
Subject: Re: emacs-29 3c1693d08b0: Fix Elisp code injection vulnerability in emacsclient-mail.desktop
Date: Wed, 08 Mar 2023 11:39:32 +0100
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/28.3 (gnu/linux)

>>>>> On Wed, 08 Mar 2023, Po Lu wrote:

> Please, fix this so it works without bash, or remove it from emacs-29.
> Once the pretest comes out, I plan to ask many coworkers to try it out.
> Many of their systems use the Korn shell and do not have bash.

Sorry, but I've installed this on emacs-29 with an explicit ack from
both Eli and Stefan.

An alternative solution would be to drop emacsclient-mail.desktop
altogether, since this desktop file isn't part of any core
functionality. It could be readded once emacsclient has gained a
--funcall argument, so that arguments can be passed in a sane way.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]