oss-sec mailing list archives

Re: Re: Emacs zero-click local command execution via TRAMP


From: Sam James <sam () gentoo org>
Date: Mon, 24 Aug 2026 06:28:59 +0100

nightmare.yeah27 () aceecat org writes:

Emacs has no security releases; do we have any idea if this will
be fixed in Emacs 31?

I believe so.

Backports we've done downstream anyway:

* 27.2: https://gitweb.gentoo.org/proj/emacs-patches.git/tree/emacs/27.2/17_all_tramp.patch
* 28.2: https://gitweb.gentoo.org/proj/emacs-patches.git/tree/emacs/28.2/21_all_tramp.patch
* 29.4: https://gitweb.gentoo.org/proj/emacs-patches.git/tree/emacs/29.4/10_all_tramp.patch
* 30.2: https://gitweb.gentoo.org/proj/emacs-patches.git/tree/emacs/30.2/05_all_tramp.patch
* 31.1_rc1: https://gitweb.gentoo.org/proj/emacs-patches.git/tree/emacs/31.1_rc1/01_all_tramp.patch

sam

Attachment: signature.asc
Description:


Current thread: