Subject: Re: bug#28618: Emacs Security Issue

From: Glenn Morris <[email-masked]>
Date: Fri, 29 Sep 2017 12:41:26 -0400

On some systems, sudo may preserve HOME by default. Or it may be
optional behaviour with "sudo -E" (eg on Debian 8, it seems).
(Of course, the attacker who has complete control of your user account
could alias "sudo" to "sudo -E".)

Ref eg

https://security.stackexchange.com/questions/18369/issues-with-preserving-home-on-sudo

As it stands, I don't think this is an Emacs issue.