Emacs 25.3 Released To Fix A Security Vulnerability Of Malicious Lisp Scripts

[phoronix]

Phoronix: Emacs 25.3 Released To Fix A Security Vulnerability Of Malicious Lisp Scripts

Emacs 25.3 is now available, but it doesn't offer major new features, rather it fixes a security vulnerability...

http://www.phoronix.com/scan.php?page=news_item&px=Emacs-25.3-Released

[tildearrow]

Typo:

Emacs' x-display decoding feature within the Enriched Text mode could lead to executing arbitary malicious Lisp code within the text.

[arjan_intel]

We're all waiting for the ()-day

[AndyChow]

We're all waiting for the ()-day

Yeah, it's like making malware for HURD or something. Who reads email in emacs? Why would you submit yourself to such torture when Alpine is available?

[tsuru]

email is the one thing I've not setup, but for all most other text and code editing, emacs is king -- especially Magit, it's in a class of its own.

[nanonyme]

I wonder if they ever make Emacs work with ASLR

[Hi-Angel]

I was about to grumble "how is that no major new features, what about the line-numbers", but now I am confused. I am using ≈1.5 month old emacs from git, and its version claims 26.0, and now 25.3 is out… So, is it completely different version, or did they renamed 26.0 → 25.3?

[hvis]

> So, is it completely different version, or did they renamed 26.0 → 25.3?

Completely different. 25.3 is from an older branch.

[bug77]

Finally. I have so many friends that could write Lips using Emacs anymore because of this. /s

[sdack]

I wonder if they ever make Emacs work with ASLR

Probably not. Why do you need it?

Sounds like you're having a roof on your house, but still want to water-proof your TV against rain.