-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 21 Aug 2026 12:24:00 -0500 Source: emacs Binary: emacs emacs-common emacs-el Architecture: all Version: 1:30.1+1-6+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Rob Browning Description: emacs - GNU Emacs editor (metapackage) emacs-common - GNU Emacs editor's shared, architecture independent infrastructur emacs-el - GNU Emacs LISP (.el) files Closes: 1129189 1134692 Changes: emacs (1:30.1+1-6+deb13u1) trixie-security; urgency=high . * Mark esh-proc-test/kill-pipeline as unstable for now. Skip it since it fails sporadically on at least s390x. Add 0024-Mark-esh-proc-test-kill-pipeline-as-unstable-for-now.patch to address the issue. . * Fix an SVG-related vulnerability (CVE-2026-6861). Add 0025-src-image.c-svg_load_image-Fix-off-by-one-mistake-bu.patch which includes the upstream patch to fix the problem. Thanks to Salvatore Bonaccorso for reporting the issue. (Closes: 1134692) . * Don't run bytecomp-tests--dest-mountpoint where bwrap doesn't work. Add 0026-bytecomp-tests-dest-mountpoint-only-run-test-if-bwra.patch to address the issue. Thanks to Santiago Vila for reporting the issue. (Closes: 1129189) . * Skip two more proced-tests in debian that are skipped on darwin to avoid hanging during the tests. Add 0025-Skip-some-proced-tests-that-appear-to-be-hanging.patch to address the issue. . * Mitigate a risk of executing arbitrary code when opening a file. The vulnerability that has been mitigated could allow a specially crafted file to trigger execution of arbitrary Emacs Lisp code immediately upon visiting it in Emacs. The broader issue is described here: https://debbugs.gnu.org/80574 . Add 0030-Mitigate-arbitrary-code-execution-vulnerability.patch to include the upstream patch addressing the problem. Thanks to Nicholas D Steeves for reporting the issue. Checksums-Sha1: 284fcbb846b2536f9e2536722bb75d464b6cb074 15791344 emacs-common_30.1+1-6+deb13u1_all.deb f505d6a7845aa85754a063aab6c93226cc3d6eca 19500736 emacs-el_30.1+1-6+deb13u1_all.deb 8514f668831a1a29e31a712ab4a4bb566fd1184d 19262 emacs_30.1+1-6+deb13u1_all-buildd.buildinfo 64257a92ea3a80d5d59b0d452d867145c2f2bf9d 19880 emacs_30.1+1-6+deb13u1_all.deb Checksums-Sha256: 1a20b06410720a432bd6c82a455a919b7083011e02a3c7b46243e65d8582791b 15791344 emacs-common_30.1+1-6+deb13u1_all.deb 374eb66e5dd66e5b643e9e584ee4d9376df14b1272fc16e7353953bbdf29063b 19500736 emacs-el_30.1+1-6+deb13u1_all.deb 02c483b0f86d90938d9fac55cfa2617c9abf24847bfd0e42360b0dae17810fab 19262 emacs_30.1+1-6+deb13u1_all-buildd.buildinfo 0a682d78ec810d088af748005e0ee9f3ead2a1cedc071e3f7310939afcbf6b9b 19880 emacs_30.1+1-6+deb13u1_all.deb Files: 159ea5011debcf358abd016cbe12defd 15791344 editors optional emacs-common_30.1+1-6+deb13u1_all.deb 8b4879ce7c5015cf7b41b3feae3b7928 19500736 editors optional emacs-el_30.1+1-6+deb13u1_all.deb 80da911a336fb6adcb3d83527b0b58aa 19262 editors optional emacs_30.1+1-6+deb13u1_all-buildd.buildinfo 65c291da187e6b96bb956c6697bc1c33 19880 editors optional emacs_30.1+1-6+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmqLZSQACgkQN8Ugyu9d QiSzfg/+JjBEPXRNSEK+OiOyCNlZxHe7vJE7iH+FsJibk50WqV+vNVIjIdlBPSbG rgijRQSAsoCcUuuotvpL9mFyXNP7Z7Ymlzrjz/R/JCIs02dgh3UqrBaH5/E0IORR kEnShYReVcLCAP5W4t8MZRvhOJv7HVn/fZ4rxNeqb7WEh8ck8cA4DMX6bAxb6/G6 R7tefDi+elWvUGeTxSKUJ7dWZ9BYBvoK1U6yq70Jd6plwJKbtjJZC1o9x6cIpOvS yq3qyJaDGA9fAa1MUVXUYJ97q2cKGCpbV8ijoClIQCfr+TJotWLNkhyGQ0SNhJiz GZ3oF2iAuS3WvlaE7rRezmZOa+ILozUN3NlaBBZJLUVkFKrDjj8ILJpz2dJgekmd HFatwVOu/5k5m4vjmpv7LVQOYo+j4EccOC5cPqamwYZL+6I6r9NDY4KnZ6sKUhkS jSHzuelW225Jvg9gQtGtbhPWqXFg5LZBt2FBgX/pMb2l5ntimXvLrH3RK3I/A6eV d7ESISX2dr3Gt5ulyEJMaB8hJqpt9EzS7b2Or3cVJWVPtHC3bkUm9t/DFnEayIMX Vn936xHoj067ItaFzm9mmo6v7Y+4/RK0ugWwA00INsO5pIS22MqABf1Hu6F6qlHV Yy1YfEl+n8VbGT5uf5shLzuk5xLWsxZYyc84fbWYR8oB3JRweO8= =Uobi -----END PGP SIGNATURE-----