From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/63639 Path: news.gmane.org!not-for-mail From: Daiki Ueno Newsgroups: gmane.emacs.devel,gmane.emacs.gnus.general Subject: Re: Security flaw in pgg-gpg-process-region? Date: Mon, 04 Sep 2006 10:36:15 +0900 Message-ID: <6d43cc51-e472-405c-b372-dba7ef5a914d@broken.deisui.org> References: <9c79059a-61a9-4fa4-8376-638753320a14@well-done.deisui.org> <4aaf7080-0e3d-4a75-aff5-f9d5bcd0437f@well-done.deisui.org> <87fyjz2gaj.fsf@pacem.orebokech.com> <8980fd83-08b6-4aef-97f2-a659cd2eadb2@well-done.deisui.org> <180dcf90-af71-4f6d-b0d0-57d364218c73@broken.deisui.org> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1157333806 2062 80.91.229.2 (4 Sep 2006 01:36:46 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Mon, 4 Sep 2006 01:36:46 +0000 (UTC) Cc: ding@gnus.org, Reiner.Steib@gmx.de, emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Sep 04 03:36:45 2006 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by ciao.gmane.org with esmtp (Exim 4.43) id 1GK3OD-0000qS-VT for ged-emacs-devel@m.gmane.org; Mon, 04 Sep 2006 03:36:42 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1GK3OD-0000yD-6L for ged-emacs-devel@m.gmane.org; Sun, 03 Sep 2006 21:36:41 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1GK3Ny-0000y8-Hi for emacs-devel@gnu.org; Sun, 03 Sep 2006 21:36:26 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1GK3Nv-0000xv-Uj for emacs-devel@gnu.org; Sun, 03 Sep 2006 21:36:25 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1GK3Nv-0000xq-Nh for emacs-devel@gnu.org; Sun, 03 Sep 2006 21:36:23 -0400 Original-Received: from [64.233.166.180] (helo=py-out-1112.google.com) by monty-python.gnu.org with esmtp (Exim 4.52) id 1GK3YL-00024T-96 for emacs-devel@gnu.org; Sun, 03 Sep 2006 21:47:09 -0400 Original-Received: by py-out-1112.google.com with SMTP id d42so1886143pyd for ; Sun, 03 Sep 2006 18:36:22 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:from:to:cc:subject:references:date:in-reply-to:message-id:user-agent:mime-version:content-type:sender; b=P45CZC6LlZFAbdUbHkkOLqJDYgtAo3bNRoS6kEchG2jqTxfkALtRns8gUlZ5OzT1XUgcbIAFVdaiErrmoW1mmUbBTKmMSWkiWRedB3zR/A0D3thB2gfDyfDR+o+pcuzLhgloQpQi19d+d8eP6CHjVCmgR72yy4LM6wEWo8tLj2c= Original-Received: by 10.35.108.18 with SMTP id k18mr6518986pym; Sun, 03 Sep 2006 18:36:22 -0700 (PDT) Original-Received: from p360 ( [150.82.173.221]) by mx.gmail.com with ESMTP id 10sm2598351nzo.2006.09.03.18.36.18; Sun, 03 Sep 2006 18:36:21 -0700 (PDT) Original-To: rms@gnu.org In-Reply-To: (Richard Stallman's message of "Sun, 03 Sep 2006 11:16:34 -0400") User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/22.0.50 (gnu/linux) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:59298 gmane.emacs.gnus.general:63639 Archived-At: >>>>> In >>>>> Richard Stallman wrote: > In the CVS Emacs we have moved PGG out of Gnus. Does our version > have these problems? If so, can you show us how to fix them? Yes it does. To solve them we should revert a couple of changes from Satyaki Das http://article.gmane.org/gmane.emacs.gnus.general/49947 http://article.gmane.org/gmane.emacs.gnus.general/50457 I've done this in Gnus CVS. I expect that the fixes will appear in Emacs CVS shortly. > We want to start pretesting, but we can still install bug fixes > if they don't involve widespread change. Regards, -- Daiki Ueno