On 2009-07-29 17:08 +0200, Vincent Lefevre wrote:

> found 473746 21.4a+1-3etch1
> severity 473746 important
> thanks
>
> On 2008-04-01 14:33:24 +0200, Sven Joachim wrote:
>> It's a known problem, see
>> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=426733#14 for an
>> explanation and a patch.
>
> This still occurs in emacs21 21.4a+1-3etch1. At my lab (with
> NFS-mounted home directories), this froze emacs for more than
> 3 minutes!

If you have root rights, the workaround is easy: install
emacs21-common-non-dfsg or touch /usr/share/emacs/21.4/etc/GNU.

> I don't know what emacs does with this file, but I also wonder
> whether this could be a security bug if some local user skx adds
> a nasty /home/skx/emacs21-21.4a+1/etc/GNU file (even if this is
> just a text file, a huge file or a symlink to /dev/random may
> have bad effects if emacs tries to read it entirely, but I can't
> test).

No, this is not a security issue.  Emacs does not read the file at all,
it does merely stat(2) it.

Sven



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to