-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 21 Aug 2026 12:24:00 -0500 Source: emacs Binary: emacs-bin-common emacs-bin-common-dbgsym emacs-gtk emacs-gtk-dbgsym emacs-lucid emacs-lucid-dbgsym emacs-nox emacs-nox-dbgsym emacs-pgtk emacs-pgtk-dbgsym Architecture: i386 Version: 1:30.1+1-6+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Rob Browning Description: emacs-bin-common - GNU Emacs editor's shared, architecture dependent files emacs-gtk - GNU Emacs editor (with GTK+ GUI support) emacs-lucid - GNU Emacs editor (with Lucid GUI support) emacs-nox - GNU Emacs editor (without GUI support) emacs-pgtk - GNU Emacs editor (with GTK+ Wayland GUI support) Closes: 1129189 1134692 Changes: emacs (1:30.1+1-6+deb13u1) trixie-security; urgency=high . * Mark esh-proc-test/kill-pipeline as unstable for now. Skip it since it fails sporadically on at least s390x. Add 0024-Mark-esh-proc-test-kill-pipeline-as-unstable-for-now.patch to address the issue. . * Fix an SVG-related vulnerability (CVE-2026-6861). Add 0025-src-image.c-svg_load_image-Fix-off-by-one-mistake-bu.patch which includes the upstream patch to fix the problem. Thanks to Salvatore Bonaccorso for reporting the issue. (Closes: 1134692) . * Don't run bytecomp-tests--dest-mountpoint where bwrap doesn't work. Add 0026-bytecomp-tests-dest-mountpoint-only-run-test-if-bwra.patch to address the issue. Thanks to Santiago Vila for reporting the issue. (Closes: 1129189) . * Skip two more proced-tests in debian that are skipped on darwin to avoid hanging during the tests. Add 0025-Skip-some-proced-tests-that-appear-to-be-hanging.patch to address the issue. . * Mitigate a risk of executing arbitrary code when opening a file. The vulnerability that has been mitigated could allow a specially crafted file to trigger execution of arbitrary Emacs Lisp code immediately upon visiting it in Emacs. The broader issue is described here: https://debbugs.gnu.org/80574 . Add 0030-Mitigate-arbitrary-code-execution-vulnerability.patch to include the upstream patch addressing the problem. Thanks to Nicholas D Steeves for reporting the issue. Checksums-Sha1: d2f800eecdc6849aab6f1d500ef5835c73ee1465 246092 emacs-bin-common-dbgsym_30.1+1-6+deb13u1_i386.deb 957bb3e08c4c570a7d9a0d7674b9e62737077013 97608 emacs-bin-common_30.1+1-6+deb13u1_i386.deb 1e5e00edf79414efae97ae7e88cd414f1160fbf9 6911952 emacs-gtk-dbgsym_30.1+1-6+deb13u1_i386.deb 530e744aa2100cae713b614b00e270aa77d698f5 7997532 emacs-gtk_30.1+1-6+deb13u1_i386.deb 9663bcad4eaca660ffdb9c00e3dc547a5d27d348 6917212 emacs-lucid-dbgsym_30.1+1-6+deb13u1_i386.deb 96ce24b0264ca158fc1850027e2830298d50ffe8 7971244 emacs-lucid_30.1+1-6+deb13u1_i386.deb 02ea7b2ac389c7fb168952bfeb54fb8e80bd12b8 5367572 emacs-nox-dbgsym_30.1+1-6+deb13u1_i386.deb c6b3f7a8f3c68f3c83475548e8d7b7c192f717a9 7461008 emacs-nox_30.1+1-6+deb13u1_i386.deb 3027b0fa00705a3ad1f2c9acca9dfbe7156bf241 6493872 emacs-pgtk-dbgsym_30.1+1-6+deb13u1_i386.deb aec3cbdd49d11468b0005feab728314e11b5a14f 7816180 emacs-pgtk_30.1+1-6+deb13u1_i386.deb 17a630fd03c3ece5b8197f68ed2b3c26665ab55e 21387 emacs_30.1+1-6+deb13u1_i386-buildd.buildinfo Checksums-Sha256: 671f8fc6805354b76e17930f9996a456f17614eff497b0418a03b09bf72697a6 246092 emacs-bin-common-dbgsym_30.1+1-6+deb13u1_i386.deb 1bd09fc2b462d03a0fd7d62751883e5c515e56a35f3743b4708c08d430ebf402 97608 emacs-bin-common_30.1+1-6+deb13u1_i386.deb 1ba9139b2120507d0b98463f01694f7697908f30fe20b73241e00911ab50e67b 6911952 emacs-gtk-dbgsym_30.1+1-6+deb13u1_i386.deb 2fb07001154d938e35d805d057382353783791a35e2d991701446fc75ae1064a 7997532 emacs-gtk_30.1+1-6+deb13u1_i386.deb 82626f9dd02c4982bef5b3e96608288be5f34d681e95fe2e4852a46da64fe85a 6917212 emacs-lucid-dbgsym_30.1+1-6+deb13u1_i386.deb a26efc54fd690e8f4703289ef0b7c55b7a2e9200afa09090c83ea595ec1ce04d 7971244 emacs-lucid_30.1+1-6+deb13u1_i386.deb 64f99796e998f581be0c79af276a396272ebd711213a1e43b58bbfb3fa9cb043 5367572 emacs-nox-dbgsym_30.1+1-6+deb13u1_i386.deb 997657853585ed26c496503e55cab062133ec6d8c2dc8ae4e2e200f85a05ddcc 7461008 emacs-nox_30.1+1-6+deb13u1_i386.deb 389a7e170906984cf2da4474dea30815f5aa6c503b7b596e2862bd58ad51b73b 6493872 emacs-pgtk-dbgsym_30.1+1-6+deb13u1_i386.deb 5202d45402fde1c2e108041d502ef2025c17ae263c9690e8b6cde9d63d221c48 7816180 emacs-pgtk_30.1+1-6+deb13u1_i386.deb d38255e5d2d0d745b61145f5480a515442aaec56cef480cc0a4cba75a96087c4 21387 emacs_30.1+1-6+deb13u1_i386-buildd.buildinfo Files: 0f4348e9d9124bf0004b8c615cb1d203 246092 debug optional emacs-bin-common-dbgsym_30.1+1-6+deb13u1_i386.deb 4a15a6a90637975f576974da5f278c7f 97608 editors optional emacs-bin-common_30.1+1-6+deb13u1_i386.deb 1122670c654d306c75ac494a1c37cf46 6911952 debug optional emacs-gtk-dbgsym_30.1+1-6+deb13u1_i386.deb ec52a1e5ac2b3a475df4e81b2d989cfe 7997532 editors optional emacs-gtk_30.1+1-6+deb13u1_i386.deb 9894d121ad282f9ca5741ca316ac4dc7 6917212 debug optional emacs-lucid-dbgsym_30.1+1-6+deb13u1_i386.deb 44d17bce01e7daf5878678a79a39a332 7971244 editors optional emacs-lucid_30.1+1-6+deb13u1_i386.deb 90103628f4bdc3d2c5919b364b4c5b26 5367572 debug optional emacs-nox-dbgsym_30.1+1-6+deb13u1_i386.deb 7c6bdd4b5b700467382f8e13780b7e3e 7461008 editors optional emacs-nox_30.1+1-6+deb13u1_i386.deb 7d7b67fcedf395ba984ed99095270f9a 6493872 debug optional emacs-pgtk-dbgsym_30.1+1-6+deb13u1_i386.deb 187f2b33f10f017df4bdafecd50672ca 7816180 editors optional emacs-pgtk_30.1+1-6+deb13u1_i386.deb 76b0bb7129022cdde39cbbccf207300f 21387 editors optional emacs_30.1+1-6+deb13u1_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmqLZcAACgkQPkCWRKsh 20flhw/+JzF/aj2IAj+lqXqfPZzACaclHmqEZPGQUB6fsY8gX/DqhNNQFwG6wcIY ex3kE4XdhtxTFofwOfWc/w9/hyvS1vPXEtDFbDvZ9K9S6Q7+tKLYw4O0Hdfcm/2+ AbGnJteuTw+RbvFdrfJhUJkc0I3tVgK9ylIrlJLdRAq1ZSUNwPM9+ap5tc8b9rxe Xn+GLigT4sYLdNHWztyOhWNODlz28SPLqLPLmlzUH/0S7QR9jNfB901N7/YGNFwe W/6oYTQ3EEOw5dCAqO4XYp3Nveb1DNk3JIRSESCHVDdkWZpIonGfxxGXmRLO6Du0 XXGUg9+gmFuC/2AN5LVSKOGG9R1Xb0EqNygrlixN3myt8G2hE4HoDCjVCyfPZGzk iKyvtKY/fdEGg10dvPWFCe/Z2u0BKrF/nTMYSAkCidpZr+RA5dVe3dZpp6fRXvO2 Li/9dqdaXDM7kjfAAk04mM6FeM6ZMns1QP9X7SEs8+3aPB3A3zfjkOdHgrayAw4t HchhJTjafuizWgfud2vSYIpDtN0tOyqj5Tez+4bDKf1nTEBNcrCC452XcpEtXBWl wqkY10lXj8YSMKF4+C4rvoIOxuz8Fh5fuMcqK3mrkT8s26oHpKJPpd770w9qG2Lj LiIu45GE8iLygapYk8Woiu01Vstqs+5/CwDR9B40R5LwXgfwiqc= =qQ7O -----END PGP SIGNATURE-----