-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Feb 2025 10:24:06 +0800 Source: emacs Architecture: source Version: 1:27.1+1-3.1+deb11u6 Distribution: bullseye-security Urgency: high Maintainer: Rob Browning <rlb@defaultvalue.org> Changed-By: Sean Whitton <spwhitton@spwhitton.name> Closes: 1033342 1088690 1098255 Changes: emacs (1:27.1+1-3.1+deb11u6) bullseye-security; urgency=high . * Fix ob-latex.el shell injection vulnerability (CVE-2023-28617) (Closes: #1033342). * Disable Flymake byte-compile backend in untrusted files (CVE-2024-53920) (Closes: #1088690). * Fix man.el shell injection vulnerability (CVE-2025-1244) (Closes: #1098255). Checksums-Sha1: 405b9ce2d3844fca810280a207a1297f908eb96f 2876 emacs_27.1+1-3.1+deb11u6.dsc fa38330a1a57cf7a01ee8128f0faf2dd0117f703 25483548 emacs_27.1+1.orig.tar.xz f024187fb14e98e35cd7e083c0a29b6e3093d26c 125832 emacs_27.1+1-3.1+deb11u6.debian.tar.xz dbeeb8ef2924a5e221ce118c24faac811bd0711d 18883 emacs_27.1+1-3.1+deb11u6_source.buildinfo Checksums-Sha256: 690bd9df90d54a8dd253d79768eafa29369833533561cf44897886a8dacd82ce 2876 emacs_27.1+1-3.1+deb11u6.dsc 7d6ab812795a2fcfef923b053f486bb9aff09fc427a0ff53169ee9c95e96b8f0 25483548 emacs_27.1+1.orig.tar.xz f5fbb45119bf23727f6c04bb9353a135e1b62768403efb61aa30ffc657746ef2 125832 emacs_27.1+1-3.1+deb11u6.debian.tar.xz 4f7301645572a6bfab13c3e9f6fb704bb0d8a5b45735b2652437252341d9d3bd 18883 emacs_27.1+1-3.1+deb11u6_source.buildinfo Files: a18bfb6cf01e6cac131e935eb6b16030 2876 editors optional emacs_27.1+1-3.1+deb11u6.dsc 4af8c300f3d4c5bb40ed08609d151caf 25483548 editors optional emacs_27.1+1.orig.tar.xz 8a3caef84a72a9b0f9c43703e2222626 125832 editors optional emacs_27.1+1-3.1+deb11u6.debian.tar.xz 7fd2b9b992e7e51b2279e916adc46d3f 18883 editors optional emacs_27.1+1-3.1+deb11u6_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAme/4DsZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQPN1EACNXSZCAUQjWo7Axmxk4VkT pGtV6giDKJ7fjGQ0/5YtCvHJSNsyUlbhe83Qi75ltwXNJ0GECBnJ5DwCJJY8QAOj oP3+TJL79yZJNSwJDPoN98RaQ1A9qkasvloxUutt+z+ZveOzSzILUEqSi0G1PWqf gs4cM2ePia6IWYCEoUpJxiyHPTKyv1W1FU784Bf2iMWD8KLxDspMF+76cTfrHWHt pgo/tCvPggO2kYTrerwGCbm+o014sJyDIekconsMk8GWEMlGtqUc87O82xQyN1xl aKyOgqK22SE8+jXIlxVqYXH7EotmagRvMdb7nyXoszuXBTFMkYdbpEvU//4a8VKG 9hps4xgrcSaO96v6pDPBhF5JAirlTRYHzkeNd/tlQPEOpz2yDuNUj1LGqGvnNcZS hlZJpTk01a03Hnu1qikvUTkjUS9Z//spvq0WDo4sGHbXU4ODWQpz00J9Wrd2q7QZ Gl/gI/ZUAPf6AohTkVFNbdQz30N/zHC56SPqc6WeABAC7Y/CO7BenOP5EGQYjnct 2fgwe/LBaueGCepb3dho5jzfxBGzAtamun8L1kA+FXbkGuQyAFUJSnydYyI4Xlnm wtRJG9oCa1uf8DI3Np6Y/tv+CvNNZvtZweKXgNE1NAWH3q2jcpu6OXs7nSV6S5j4 FrtrFyVxNeQcTkUfxpacxQ== =cY/f -----END PGP SIGNATURE-----