Re: Request to backport fix for CVE-2022-45939 to Emacs 28

[Eli Zaretskii]

> From: Stefan Kangas <stefankangas@gmail.com>
> Date: Fri, 17 Feb 2023 02:26:28 -0800
> Cc: theophilusx@gmail.com, emacs-devel@gnu.org
> 
> Eli Zaretskii <eliz@gnu.org> writes:
> 
> >> What makes it a ontrivial job to release one?  Is it because there
> >> other fixes have been committed to the Emacs 28 branch since the last
> >> release?  Would including them in a release call for some additioal
> >> work?
> >
> > The whole process takes a non-trivial amount of work.  It is described
> > in make-tarball.txt.  If someone wants to do it, they are welcome.
> 
> (I saw this thread just now.)
> 
> Thanks, I'm working on it.  Please see the commits I just pushed to the
> emacs-28 branch.  Let me know if you want to inspect the tarball before
> I make the release (if so, we could probably coordinate it off-list).

Sorry, I don't have time for that now.  The tarball needs to be
test-built on the main platforms we care about, and the diffs against
the Emacs 28.2 tarball carefully eyeballed to make sure nothing is
amiss.  Other than that, you have my blessing.

Thanks!