Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > fj.editor.emacs > #7

[ANNOUNCE] Emacs 25.3 released

Show all headers | View raw

From: Nicolas Petton <nicolas@petton.fr>
Subject: [ANNOUNCE] Emacs 25.3 released
Date: Mon, 11 Sep 2017 22:52:00 +0200
Message-ID: <87wp55t0un.fsf@petton.fr>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha256; protocol="application/pgp-signature"
To: Emacs Devel <emacs-devel@gnu.org>,

--=-=-=
Content-Type: text/plain

Hi!

Version 25.3 of the Emacs text editor is now available.

For more information on Emacs, see:
  http://www.gnu.org/software/emacs

You can retrieve the source from your nearest GNU mirror by using one
of the following links:
  http://ftpmirror.gnu.org/emacs/emacs-25.3.tar.xz
  http://ftpmirror.gnu.org/emacs/emacs-25.3.tar.gz

You can get the PGP signatures at
  http://ftp.gnu.org/gnu/emacs/emacs-25.3.tar.xz.sig
  http://ftp.gnu.org/gnu/emacs/emacs-25.3.tar.gz.sig

You can choose a mirror explicitly from the list at:
  http://www.gnu.org/prep/ftp.html

Mirrors may take some time to update; the main GNU ftp server is at:
  http://ftp.gnu.org/gnu/emacs/

This is an emergency release to fix a security vulnerability in Emacs.

Enriched Text mode has its support for decoding 'x-display' disabled.
This feature allows saving 'display' properties as part of text.
Emacs 'display' properties support evaluation of arbitrary Lisp forms
as part of instantiating the property, so decoding 'x-display' is
vulnerable to executing arbitrary malicious Lisp code included in the
text (e.g., sent as part of an email message).

This vulnerability was introduced in Emacs 19.29.  To work around that
in Emacs versions before 25.3, append the following to your ~/.emacs
init file:

  (eval-after-load "enriched"
    '(defun enriched-decode-display-prop (start end &optional param)
       (list start end)))

Gnus no longer supports "richtext" and "enriched" inline MIME objects.
This support was disabled to avoid evaluation of arbitrary Lisp code
contained in email messages and news articles.


Printed copies of the Emacs manual are available for purchase from the
Free Software Foundation's online store at:
  http://shop.fsf.org/product/emacs-manual/

(The version on sale is updated for Emacs 24.2, but it remains a great
reference book for current Emacs, and buying a copy is a great way to
support the work of the FSF.)

Regards,
Nico

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEKNO+2FH986tX/vk8IzWHpHwgeRAFAlm293AACgkQIzWHpHwg
eRBbGAf+LlIs5nxBz18cKnVOsINCxK71VJv+2JPZ01M0A8QY/5YmqnZyQ3GszKms
haXWNGxjrXMcR3u0GHs3EXFLX7YxvSWKs9xfFueQWZ3dJZifpyWmIwqK4O3Cjljk
BWQ4G3BonjAijkf+JjV/r8QL4EWVjYJWetxLh15+zbK08lS0znAYnLhkDvb0pWPJ
eP+SX1hAOIppPJxtIppvcrTCEqoTIxPhjsibM2JzSnKu8hCGzZveS6Hh/4kn8wvh
qVnZHiXTdqAJXiLPinQODoz34O+nmuyrUQo5Mnwpc+X5eLQjo8Gqm6CPLqoOZJh6
7D736/ampbcYC8GQIrplJqLXMd2tUQ==
=vct8
-----END PGP SIGNATURE-----
--=-=-=--

Back to fj.editor.emacs | Previous | Next | Find similar

Thread

[ANNOUNCE] Emacs 25.3 released Katsumi Yamaoka <yamaoka@jpl.org> - 2017-09-12 08:01 +0900

csiph-web