-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Feb 2025 09:52:07 +0800 Source: emacs Binary: emacs-bin-common emacs-bin-common-dbgsym emacs-gtk emacs-gtk-dbgsym emacs-lucid emacs-lucid-dbgsym emacs-nox emacs-nox-dbgsym Architecture: amd64 Version: 1:28.2+1-15+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Sean Whitton Description: emacs-bin-common - GNU Emacs editor's shared, architecture dependent files emacs-gtk - GNU Emacs editor (with GTK+ GUI support) emacs-lucid - GNU Emacs editor (with Lucid GUI support) emacs-nox - GNU Emacs editor (without GUI support) Closes: 1088690 1098255 Changes: emacs (1:28.2+1-15+deb12u4) bookworm-security; urgency=high . * Disable Flymake byte-compile backend in untrusted files (CVE-2024-53920) (Closes: #1088690). * Fix man.el shell injection vulnerability (CVE-2025-1244) (Closes: #1098255). Checksums-Sha1: 277e6fed5406a6e93975b2d3de3dd989e3da78ab 277512 emacs-bin-common-dbgsym_28.2+1-15+deb12u4_amd64.deb e1f1704081b63784dc9ed2c433780c676358e3b1 103176 emacs-bin-common_28.2+1-15+deb12u4_amd64.deb 073ab5371ff383f8586d3d745987b211603d4f67 5928176 emacs-gtk-dbgsym_28.2+1-15+deb12u4_amd64.deb 768ceea2865ed5b74d80afa3de7b238ecc85617c 5986460 emacs-gtk_28.2+1-15+deb12u4_amd64.deb 0514cd9b3274d847409ede80b894bd018c5fa025 5925324 emacs-lucid-dbgsym_28.2+1-15+deb12u4_amd64.deb 8d8e2bcecd1ba5d02c35c35045ee9e9836137f73 5978416 emacs-lucid_28.2+1-15+deb12u4_amd64.deb 99a8a466ae7ffb7722b494cb168b938dc36131d0 4761492 emacs-nox-dbgsym_28.2+1-15+deb12u4_amd64.deb 9f0ecff619643dbcdb385e871e3ad85e47daf65a 5601128 emacs-nox_28.2+1-15+deb12u4_amd64.deb 284d81067542dddc913cc0a8acabc4110965b432 19502 emacs_28.2+1-15+deb12u4_amd64-buildd.buildinfo Checksums-Sha256: aba78a105c9fbac43705056b67e2b69a0562a527709594cd36b634bcc44d0cce 277512 emacs-bin-common-dbgsym_28.2+1-15+deb12u4_amd64.deb 8bb991a052b229384f7c8c80f51c639886be819d55eecfbd50db0303cf07951b 103176 emacs-bin-common_28.2+1-15+deb12u4_amd64.deb 12fd5a109f1aa47ef9a42fbeffb612d514da459cc0082c21f97516cebac673f9 5928176 emacs-gtk-dbgsym_28.2+1-15+deb12u4_amd64.deb 5ee24668fa1efe63b52b88c0226084c5ee95e429fa98812f5e20e882c0400278 5986460 emacs-gtk_28.2+1-15+deb12u4_amd64.deb 6a87c002a9cae3cf437ccb77a0c9eaf6252986b10650e74a1596a91634c49982 5925324 emacs-lucid-dbgsym_28.2+1-15+deb12u4_amd64.deb c502c9b2b4f34d8c3dbb20c79c7cd55f3af75c31295f04b7e79400edd6919cac 5978416 emacs-lucid_28.2+1-15+deb12u4_amd64.deb acff46f1db401a2fb2bdb276870daff44f61044f9e2964fe4254fde80c1cb41f 4761492 emacs-nox-dbgsym_28.2+1-15+deb12u4_amd64.deb 049b1ba6c09be54be420f1ea8ff8a447c0bce24942e362b92e73fb88a37929a6 5601128 emacs-nox_28.2+1-15+deb12u4_amd64.deb e02484e6375a1edf10c99080974a09ba2c393a5a5e2373a25757ad513973af3b 19502 emacs_28.2+1-15+deb12u4_amd64-buildd.buildinfo Files: a65507e0c6502f2d2f6f4c8ba34e28a9 277512 debug optional emacs-bin-common-dbgsym_28.2+1-15+deb12u4_amd64.deb a1e9b0e8524c82a03340207d0669bdd3 103176 editors optional emacs-bin-common_28.2+1-15+deb12u4_amd64.deb 0cc84802c7e8b09020cc4b053de336ab 5928176 debug optional emacs-gtk-dbgsym_28.2+1-15+deb12u4_amd64.deb 8243fc2c9cf0c617625dc01dc2411768 5986460 editors optional emacs-gtk_28.2+1-15+deb12u4_amd64.deb 08ca99d0b27c6888899c3990bd6a2168 5925324 debug optional emacs-lucid-dbgsym_28.2+1-15+deb12u4_amd64.deb 222816fe91a60043148cda430d8e8c07 5978416 editors optional emacs-lucid_28.2+1-15+deb12u4_amd64.deb f3996df70d2c4666578e221309483512 4761492 debug optional emacs-nox-dbgsym_28.2+1-15+deb12u4_amd64.deb a0b2449524f8b8e580f70478c18532be 5601128 editors optional emacs-nox_28.2+1-15+deb12u4_amd64.deb abccd951dee030b91099a704c35e419e 19502 editors optional emacs_28.2+1-15+deb12u4_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Unr4QHS5Yi4rr9Q3KGKEAtjIVgFAme/0e4ACgkQ3KGKEAtj IViZfhAAwoOm7i0lJHXYQBRStlHA+y/5lJ6KjgFUvV1UnWKfpr62CgDFqC4t9oUn Y//NCgP3dJvfBsRyfJkndUqysN1hwof3Fhf8cMAD9nX82/X/8orVz2fo694mJB1L k0DxFWm/Fq5u3l125O6CnF+Y+90G+NiN1BtQgBRmfJwC1kFb3Te15WDr5w0hewvi 44tJGWHlBPB+eZvvrgoXOTj6ssHphJh043bTq8vW73GA3j2SWmD5rNvQBFrJftmU K28FRn/QpeWK04CjymWfOXTWpH6o+6vGkn15ykGK/gj+M34rdWeQ0zRjclcrUUCY Ko4uhSd0YPy/c9tLCwYWzG0BBVqFfUiHKIHSAr/N4CrTWG6hff6FgN+GFkRdMAKv xP8IE2M5xFDnjy56qZKzDGjgUgCLiXuZZMKzNTClwPxA7oSm2Vu8Hmu2M7ZKDLkW rx3mJNnNS4/87W+qgnVvQ4HzoCzKjUxCKhlL/3SaJk6G33dAykZCFHmMC6kmJrGq qo4tyxrfE/DYwVMcqKZg+BCiq/cm4Wfm/QR/jCkgMfByrI7bfA+5XcgUO7ETMStq yxpK9YpF8mE1PS/h9F6wpXzoA89NJcZpk1keHld6M0NpTnqWZbvJVI6VeBg0rID1 ZPXh3OXmCd2Bq5GFcwyVpdIfAEEzuoLYWLCIJqEQ/gV3UjG3iwg= =9a/q -----END PGP SIGNATURE-----