Re: Request to backport fix for CVE-2022-45939 to Emacs 28

[Robert Pluim]

>>>>> On Fri, 17 Feb 2023 02:26:28 -0800, Stefan Kangas 
>>>>> <stefankangas@gmail.com> said:

    Stefan> Eli Zaretskii <eliz@gnu.org> writes:
    >>> What makes it a ontrivial job to release one?  Is it because there
    >>> other fixes have been committed to the Emacs 28 branch since the last
    >>> release?  Would including them in a release call for some additioal
    >>> work?
    >> 
    >> The whole process takes a non-trivial amount of work.  It is described
    >> in make-tarball.txt.  If someone wants to do it, they are welcome.

    Stefan> (I saw this thread just now.)

    Stefan> Thanks, I'm working on it.  Please see the commits I just pushed to 
the
    Stefan> emacs-28 branch.  Let me know if you want to inspect the tarball 
before
    Stefan> I make the release (if so, we could probably coordinate it 
off-list).

Your NEWS entry mentions only the CVE, not the other security
fixes. Although we donʼt normally announce bug fixes in NEWS, they
might be worth mentioning.

Robert
--