-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Feb 2025 09:52:07 +0800 Source: emacs Binary: emacs-bin-common emacs-bin-common-dbgsym emacs-gtk emacs-gtk-dbgsym emacs-lucid emacs-lucid-dbgsym emacs-nox emacs-nox-dbgsym Architecture: arm64 Version: 1:28.2+1-15+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Sean Whitton Description: emacs-bin-common - GNU Emacs editor's shared, architecture dependent files emacs-gtk - GNU Emacs editor (with GTK+ GUI support) emacs-lucid - GNU Emacs editor (with Lucid GUI support) emacs-nox - GNU Emacs editor (without GUI support) Closes: 1088690 1098255 Changes: emacs (1:28.2+1-15+deb12u4) bookworm-security; urgency=high . * Disable Flymake byte-compile backend in untrusted files (CVE-2024-53920) (Closes: #1088690). * Fix man.el shell injection vulnerability (CVE-2025-1244) (Closes: #1098255). Checksums-Sha1: e21298d39eaeadf028c08a452300f9ab92ab3770 275168 emacs-bin-common-dbgsym_28.2+1-15+deb12u4_arm64.deb bdd8b5e30d0e3bd5d59fa9f725e03310e0b664e9 97072 emacs-bin-common_28.2+1-15+deb12u4_arm64.deb b744ab2a93bd4828c8c68a225f65a4692d711f91 5850436 emacs-gtk-dbgsym_28.2+1-15+deb12u4_arm64.deb 0e1f1e24e3fe412f03b18bf3b748c36425eee5c1 5735952 emacs-gtk_28.2+1-15+deb12u4_arm64.deb e8598f0364eb2503a68424ae48256c9d9c2c4655 5845712 emacs-lucid-dbgsym_28.2+1-15+deb12u4_arm64.deb 1512235b3a5fb5be0dfa39598f9a8e005061916f 5754864 emacs-lucid_28.2+1-15+deb12u4_arm64.deb 4805aa25356add8977f2084a19e71a2459eda3b8 4701600 emacs-nox-dbgsym_28.2+1-15+deb12u4_arm64.deb 8870092ce883f9002b740f2ece0c84a16713fa25 5379808 emacs-nox_28.2+1-15+deb12u4_arm64.deb 6931d9577cc0be65f43791aa49c25a1a0ee1fd02 19438 emacs_28.2+1-15+deb12u4_arm64-buildd.buildinfo Checksums-Sha256: be26dca4a92345fc78770b685f10ddba0436061f9f278481390857a7378797ab 275168 emacs-bin-common-dbgsym_28.2+1-15+deb12u4_arm64.deb 7704137635b9d5303814df47f61203dc96acbcb36be2037d01b4593c0e94880e 97072 emacs-bin-common_28.2+1-15+deb12u4_arm64.deb ffd7c145b9d08a0a3b802c85a46eb581848ccc491250df6ac808c2904e074612 5850436 emacs-gtk-dbgsym_28.2+1-15+deb12u4_arm64.deb 6e39245f217e567006668d9d885858bbb4db7da4d016c4d995925e4108bb30c4 5735952 emacs-gtk_28.2+1-15+deb12u4_arm64.deb 29c30e988a180fd34e44fefc2f981750d789ef049e7ece037fd4a338c4f33b6d 5845712 emacs-lucid-dbgsym_28.2+1-15+deb12u4_arm64.deb 7a13ea35f77ca7705023217d24b65dc6919b113cdfb41b6c2ded199d0c15fb40 5754864 emacs-lucid_28.2+1-15+deb12u4_arm64.deb e63217f0e70ec5763e54fdaa6024f7c0d4275b93b9ecc802aace299cf333e48b 4701600 emacs-nox-dbgsym_28.2+1-15+deb12u4_arm64.deb 19230638fcb9680adc28388a85c101fe66f2faa77d3ecf87795d54df08b4ff3c 5379808 emacs-nox_28.2+1-15+deb12u4_arm64.deb 0cffdf99a6ce24bc8262e1bc52c66bc34bea187285675efc7cbf1bd68c2fcbe4 19438 emacs_28.2+1-15+deb12u4_arm64-buildd.buildinfo Files: df7c4e1ba71f735d1293adfa59f783d7 275168 debug optional emacs-bin-common-dbgsym_28.2+1-15+deb12u4_arm64.deb 84fe8bb97d3fc141dcc4f4798f80609b 97072 editors optional emacs-bin-common_28.2+1-15+deb12u4_arm64.deb 269d4feaeb8e79eb9071e9763a64abb9 5850436 debug optional emacs-gtk-dbgsym_28.2+1-15+deb12u4_arm64.deb 8531c5b75d799b5968b29937cd9ac963 5735952 editors optional emacs-gtk_28.2+1-15+deb12u4_arm64.deb ba523e291fb30999e6b476e6262f0302 5845712 debug optional emacs-lucid-dbgsym_28.2+1-15+deb12u4_arm64.deb 39e7069a6e0ce5b70ec3d6b303b36068 5754864 editors optional emacs-lucid_28.2+1-15+deb12u4_arm64.deb d53d15b5f9bd1f380db0da6769c73474 4701600 debug optional emacs-nox-dbgsym_28.2+1-15+deb12u4_arm64.deb 2a47eb1d0ceb8fb6215de7ef4547dd1e 5379808 editors optional emacs-nox_28.2+1-15+deb12u4_arm64.deb 324b87852ccdcb93cac31c663bb87dd2 19438 editors optional emacs_28.2+1-15+deb12u4_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegRwmIwj8f99iF4m4CwlMGxHD8UFAme/1XwACgkQ4CwlMGxH D8VxWBAAu88vcOdr7igfB/bEUBCuf5/BJDEoHPeCx/qdTUyCKeIK0DegIQuhG8/X CWke22ACuyxHcakZNaz3kHjGTIR/b09o2tueM/o80Ta2XzB3DAyKCR8jaHbsVmEg UalRGit3Z4KiP0G/5VnHDfCiOWPQV451kwLAp1tyQuoDNPAZaW/OuQXDvxnSeNdI BqIsa4Shj4E2m6l5yiYAZTi7PoUSqd+B4W+n6m8kzRhLncUNxfVJCcJC4ODCPg42 BhcQXbE6OROVGx7P2yjLaM7UPsPpYd+Rj0jacKjCt6/xpsGvIqGDyHcXO/W94ZJD eeaDAIxBhb9XOqit5Tme3H3Ly93+lp0wEKRPAOt9r667djYhUsqakGfhKSAMPCbS PVbfXjuXASbBpLehbezMYYSpAuaSuIZyIm1I8tsTvblkXxvsgU7qFwRl07vZ++DA O+BhMlIpZcjoHPEwwPKgU0HqZlfoxcnXhnf4rbq7iNPXnT2M9G3bsulS3ejsJ6vL W9sb060YxM2BWbw8ztx7p7zNjM3QCKfBvQ7CER5ylLsXs1phTPQ6VG5T6m8dRpoi Dm2l+D9D07HJ+1536q8rlCqEwZG1OjiyMoXlL0p01Uh1xlTmGTytXrrHSMYQofed 7FmHAxpJrvfUIOb2u0PLDJq1w0ECDt6JXXsf1lNT2UphevzuU+Y= =QA24 -----END PGP SIGNATURE-----