← Back to team overview

ubuntu-elisp team mailing list archive

[Bug 1424456] Re: package.el downloads unsigned code over HTTP and executes it

 

** Information type changed from Private Security to Public Security

** Changed in: emacs24 (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Emacs Lisp, which is subscribed to emacs24 in Ubuntu.
https://bugs.launchpad.net/bugs/1424456

Title:
  package.el downloads unsigned code over HTTP and executes it

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/emacs24/+bug/1424456/+subscriptions