-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Feb 2025 09:52:07 +0800 Source: emacs Binary: emacs-bin-common emacs-bin-common-dbgsym emacs-gtk emacs-gtk-dbgsym emacs-lucid emacs-lucid-dbgsym emacs-nox emacs-nox-dbgsym Architecture: armhf Version: 1:28.2+1-15+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Sean Whitton Description: emacs-bin-common - GNU Emacs editor's shared, architecture dependent files emacs-gtk - GNU Emacs editor (with GTK+ GUI support) emacs-lucid - GNU Emacs editor (with Lucid GUI support) emacs-nox - GNU Emacs editor (without GUI support) Closes: 1088690 1098255 Changes: emacs (1:28.2+1-15+deb12u4) bookworm-security; urgency=high . * Disable Flymake byte-compile backend in untrusted files (CVE-2024-53920) (Closes: #1088690). * Fix man.el shell injection vulnerability (CVE-2025-1244) (Closes: #1098255). Checksums-Sha1: 94ee3cb448a1fc3dc22796fc397e04dc97ccced6 263616 emacs-bin-common-dbgsym_28.2+1-15+deb12u4_armhf.deb ea09d52f79297b70be588fa466b6e133458287db 93440 emacs-bin-common_28.2+1-15+deb12u4_armhf.deb 3b4d6c518cd75b75c108ec6c64060c238bc8b24c 5767392 emacs-gtk-dbgsym_28.2+1-15+deb12u4_armhf.deb 7c47178c9c5d2c6f1c6ece1e176cbf72dca493f9 5535996 emacs-gtk_28.2+1-15+deb12u4_armhf.deb 811977b5713858d4df5320bf2ec94b687e19a817 5762052 emacs-lucid-dbgsym_28.2+1-15+deb12u4_armhf.deb b143ed2a7d61b1da1d9a3a1520c50f36f131f286 5531976 emacs-lucid_28.2+1-15+deb12u4_armhf.deb 7afca096198aeb22dda3e9c7c7ed382626044693 4632796 emacs-nox-dbgsym_28.2+1-15+deb12u4_armhf.deb 39c90188aaef71f03b094a2b237bdf2f456c4f78 5176688 emacs-nox_28.2+1-15+deb12u4_armhf.deb e7037f52e6ece5f91e74e84aa9e4ab804f2a85d5 19290 emacs_28.2+1-15+deb12u4_armhf-buildd.buildinfo Checksums-Sha256: f9c2279fecf8a1590ab70efe9fef346dda659c0fcfa8a221a5827cfc8247b3c6 263616 emacs-bin-common-dbgsym_28.2+1-15+deb12u4_armhf.deb 89ad9609ef734c0b2faae4c94d5555f9e033b211c636b69b13cb507376bd5a15 93440 emacs-bin-common_28.2+1-15+deb12u4_armhf.deb 384301738a24225725491ae7bce607e3a2928162899bb165b5389de60e37d422 5767392 emacs-gtk-dbgsym_28.2+1-15+deb12u4_armhf.deb d70315c252094fb7eb9a714ec088a1f6c11a5da4a1b9cf0ef43d7a8f521146e7 5535996 emacs-gtk_28.2+1-15+deb12u4_armhf.deb c55701ce23b4b599898bd7f3dc912ce4b3eb22f2e4331cc15485b8648274a9e4 5762052 emacs-lucid-dbgsym_28.2+1-15+deb12u4_armhf.deb 2528955ffe98abdf87e615bb212342937550483ad0d7ef589794c6efc50c9d31 5531976 emacs-lucid_28.2+1-15+deb12u4_armhf.deb 7bb8d7670f23c723ee18f1ea1fe0e4dfde4e4a0cecdef8107fdc59ba8d07325f 4632796 emacs-nox-dbgsym_28.2+1-15+deb12u4_armhf.deb d8cb818035c7a0d21c1aa5fd5746e51fb47d3d08a28233ba97697dfc13d143d8 5176688 emacs-nox_28.2+1-15+deb12u4_armhf.deb ad330bd162c9c0d2100d3d6277edbc72bdb86a9b7f95ddd258a6a83c90ec8ef5 19290 emacs_28.2+1-15+deb12u4_armhf-buildd.buildinfo Files: b9e33a24c950687f61e0ecbf37292dd9 263616 debug optional emacs-bin-common-dbgsym_28.2+1-15+deb12u4_armhf.deb f5cc0b7df8af3b49b6e6e72280c0f30b 93440 editors optional emacs-bin-common_28.2+1-15+deb12u4_armhf.deb 919aaf28489d04d4735318c7aeb54f94 5767392 debug optional emacs-gtk-dbgsym_28.2+1-15+deb12u4_armhf.deb 2d4fc8f566e4359d2c02ea1d99e71fe5 5535996 editors optional emacs-gtk_28.2+1-15+deb12u4_armhf.deb b9d7889e08021878d0dcba3084cddcd1 5762052 debug optional emacs-lucid-dbgsym_28.2+1-15+deb12u4_armhf.deb 5a6cce10141ba6689d8bef6e44cb706d 5531976 editors optional emacs-lucid_28.2+1-15+deb12u4_armhf.deb a23e87ba8f6c72f6efa4f074ef153278 4632796 debug optional emacs-nox-dbgsym_28.2+1-15+deb12u4_armhf.deb e6da189679e2c723e005c25fcb6c0051 5176688 editors optional emacs-nox_28.2+1-15+deb12u4_armhf.deb cb567e78dc1c31a6b0a95a3f3f11e1b5 19290 editors optional emacs_28.2+1-15+deb12u4_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbvtGd+QaAE2Bi5fsFgOvjtRcdMFAme/41oACgkQsFgOvjtR cdNo5xAAkWse8j5OYoVyGDX/YCyRGc/ZhZlKG88UQ3kowNMpDvUfqR9bHbedfMop 4eDCXfW6H4ZDwZ+n7o8EIHKLIY449Pl1g9oybB56IaFF7clKWv73K/DhYNLXA+q6 PhCyhgKEbzCEwPda5Z25BAnGDkQMgI1jtKwE48l9BagIGvC0ZZxB1mXEVh4I04B6 UeIsoBt5zpj7AfIKDLiUqJurqA8eqq9kE9i2oehG8W9hyJ6PerveWPcIsTr2ahD/ Tz19BBgv6sYS/f54ZOAVxDQIh7i9IQdOwYiQ1q2jl18VaFNFxSBmEx+C7VlKahHb OLd5G0BT9G5e934kQYr7A1viBO3VY26uDtmGFoeMLEtv6ecHNKInvGx8Qbd24KbJ c4XDr7lZPUshm/Dh+wR1k9tDJ5K3JdxVgaqyiUxpio+XdQe9EAlJ1vwh2JZUmTIo /O36TOfup9mA9PGsglN38j1xrL3CaExYNwlRlVXPdU3caV534lJ9KmjcfuvTdUtN fWeVLqCJriBqZOVxMZGYA54jtBtzBQ2i1n9+3zPpVVFmbh2n3+UCCcVYLz0szoan dSpFmApCdD5ialHC+1cnlHLSKRNbTW9R4vP3+SkdaU72mDTWSQL93J808FAtZZ0H QGAitjgOfqwrxapGJ/4MBcQLmfL6M3MpXOr8BzRTw620+DX9Bcw= =Ss4b -----END PGP SIGNATURE-----