Sean Whitton uploaded new packages for emacs which fixed the following
security problems:
CVE-2024-53920
Several ways to trigger arbitrary code execution were discovered in
Emacs's support for editing files in its own dialect of Lisp.
These include arbitrary code execution upon opening an otherwise
innocent-looking file, with any (or no) file extension, for editing.
CVE-2025-1244
Improper handling of custom 'man' URI schemes could allow an
attacker to execute arbitrary shell commands by tricking users into
visiting a specially crafted website, or an HTTP URL with a
redirect.
For the bookworm-backports distribution the problems have been fixed in
version 1:30.1+1-3~bpo12+1.
Attachment:
signature.asc
Description: PGP signature