On 25/01/2025 19:30, Sean Whitton wrote:
We want to fix this for trixie. I hope that Emacs 30.1 comes out before our freeze, then we will just upload that.
Emacs-29 in trixie as a stable release certainly would be disappointing. My primary concern are Emacs-28 and Emacs-27 in current stable and oldstable repositories. These versions have to be patched anyway. Notice that the CVE description does not contain the most dangerous case. It is not really apparent even from the updated version of the blog post despite reported as https://debbugs.gnu.org/37656 years ago. Please, read the bug description if your opinion is based on early variant of the blog post. Completion bug is not explicitly referenced as well https://debbugs.gnu.org/32495 but it is discussed more extensively.