-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 27 Feb 2025 10:24:06 +0800
Source: emacs
Architecture: source
Version: 1:27.1+1-3.1+deb11u6
Distribution: bullseye-security
Urgency: high
Maintainer: Rob Browning <rlb@defaultvalue.org>
Changed-By: Sean Whitton <spwhitton@spwhitton.name>
Closes: 1033342 1088690 1098255
Changes:
emacs (1:27.1+1-3.1+deb11u6) bullseye-security; urgency=high
.
* Fix ob-latex.el shell injection vulnerability (CVE-2023-28617)
(Closes: #1033342).
* Disable Flymake byte-compile backend in untrusted files
(CVE-2024-53920) (Closes: #1088690).
* Fix man.el shell injection vulnerability (CVE-2025-1244)
(Closes: #1098255).
Checksums-Sha1:
405b9ce2d3844fca810280a207a1297f908eb96f 2876 emacs_27.1+1-3.1+deb11u6.dsc
fa38330a1a57cf7a01ee8128f0faf2dd0117f703 25483548 emacs_27.1+1.orig.tar.xz
f024187fb14e98e35cd7e083c0a29b6e3093d26c 125832 emacs_27.1+1-3.1+deb11u6.debian.tar.xz
dbeeb8ef2924a5e221ce118c24faac811bd0711d 18883 emacs_27.1+1-3.1+deb11u6_source.buildinfo
Checksums-Sha256:
690bd9df90d54a8dd253d79768eafa29369833533561cf44897886a8dacd82ce 2876 emacs_27.1+1-3.1+deb11u6.dsc
7d6ab812795a2fcfef923b053f486bb9aff09fc427a0ff53169ee9c95e96b8f0 25483548 emacs_27.1+1.orig.tar.xz
f5fbb45119bf23727f6c04bb9353a135e1b62768403efb61aa30ffc657746ef2 125832 emacs_27.1+1-3.1+deb11u6.debian.tar.xz
4f7301645572a6bfab13c3e9f6fb704bb0d8a5b45735b2652437252341d9d3bd 18883 emacs_27.1+1-3.1+deb11u6_source.buildinfo
Files:
a18bfb6cf01e6cac131e935eb6b16030 2876 editors optional emacs_27.1+1-3.1+deb11u6.dsc
4af8c300f3d4c5bb40ed08609d151caf 25483548 editors optional emacs_27.1+1.orig.tar.xz
8a3caef84a72a9b0f9c43703e2222626 125832 editors optional emacs_27.1+1-3.1+deb11u6.debian.tar.xz
7fd2b9b992e7e51b2279e916adc46d3f 18883 editors optional emacs_27.1+1-3.1+deb11u6_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=cY/f
-----END PGP SIGNATURE-----
Attachment:
pgpWaFtbtinuQ.pgp
Description: PGP signature