-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 21 Aug 2026 12:24:00 -0500 Source: emacs Binary: emacs-bin-common emacs-bin-common-dbgsym emacs-gtk emacs-gtk-dbgsym emacs-lucid emacs-lucid-dbgsym emacs-nox emacs-nox-dbgsym emacs-pgtk emacs-pgtk-dbgsym Architecture: amd64 Version: 1:30.1+1-6+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Rob Browning Description: emacs-bin-common - GNU Emacs editor's shared, architecture dependent files emacs-gtk - GNU Emacs editor (with GTK+ GUI support) emacs-lucid - GNU Emacs editor (with Lucid GUI support) emacs-nox - GNU Emacs editor (without GUI support) emacs-pgtk - GNU Emacs editor (with GTK+ Wayland GUI support) Closes: 1129189 1134692 Changes: emacs (1:30.1+1-6+deb13u1) trixie-security; urgency=high . * Mark esh-proc-test/kill-pipeline as unstable for now. Skip it since it fails sporadically on at least s390x. Add 0024-Mark-esh-proc-test-kill-pipeline-as-unstable-for-now.patch to address the issue. . * Fix an SVG-related vulnerability (CVE-2026-6861). Add 0025-src-image.c-svg_load_image-Fix-off-by-one-mistake-bu.patch which includes the upstream patch to fix the problem. Thanks to Salvatore Bonaccorso for reporting the issue. (Closes: 1134692) . * Don't run bytecomp-tests--dest-mountpoint where bwrap doesn't work. Add 0026-bytecomp-tests-dest-mountpoint-only-run-test-if-bwra.patch to address the issue. Thanks to Santiago Vila for reporting the issue. (Closes: 1129189) . * Skip two more proced-tests in debian that are skipped on darwin to avoid hanging during the tests. Add 0025-Skip-some-proced-tests-that-appear-to-be-hanging.patch to address the issue. . * Mitigate a risk of executing arbitrary code when opening a file. The vulnerability that has been mitigated could allow a specially crafted file to trigger execution of arbitrary Emacs Lisp code immediately upon visiting it in Emacs. The broader issue is described here: https://debbugs.gnu.org/80574 . Add 0030-Mitigate-arbitrary-code-execution-vulnerability.patch to include the upstream patch addressing the problem. Thanks to Nicholas D Steeves for reporting the issue. Checksums-Sha1: 89a1dba1856614ce093d08e5e72b0de136c97b2c 255108 emacs-bin-common-dbgsym_30.1+1-6+deb13u1_amd64.deb 5be0c5296fc88471524954359230fbb351ab309e 98408 emacs-bin-common_30.1+1-6+deb13u1_amd64.deb 1eb14b721f443d6440bc2ddd57d6d29b32c1da4e 7387064 emacs-gtk-dbgsym_30.1+1-6+deb13u1_amd64.deb cb673d281342b4eb99afaf0d81a92bb21a8b397d 7807916 emacs-gtk_30.1+1-6+deb13u1_amd64.deb f2d181abcf623117808810e310630287222afa30 7395612 emacs-lucid-dbgsym_30.1+1-6+deb13u1_amd64.deb 844bdecde28843a22f50cfabad80b2de010b8b4a 7779404 emacs-lucid_30.1+1-6+deb13u1_amd64.deb b0510949b8fcb7b9bf003720c6808183025629b5 5716032 emacs-nox-dbgsym_30.1+1-6+deb13u1_amd64.deb 2bc2f023c5291427607b2f3b39fbd7165f848d32 7262376 emacs-nox_30.1+1-6+deb13u1_amd64.deb 5fe7cdc51f23bf1b677c4a4611a9a197ebe50aa7 6929632 emacs-pgtk-dbgsym_30.1+1-6+deb13u1_amd64.deb 950310af403fbb7c3be24b847c015ef11ad804ee 7640456 emacs-pgtk_30.1+1-6+deb13u1_amd64.deb c25563186d81c5aca1375a446501aa1a5cba658b 21510 emacs_30.1+1-6+deb13u1_amd64-buildd.buildinfo Checksums-Sha256: 618e3630c3caba1469c82a9007b00f4db134c21fc19fc2b9cfe6e423655039d2 255108 emacs-bin-common-dbgsym_30.1+1-6+deb13u1_amd64.deb 86ad88ffb8d0024fe22a4b95863918655ecb10523c4bcdd199540da75f67c4db 98408 emacs-bin-common_30.1+1-6+deb13u1_amd64.deb 392c3cc49f09c2d78897dd7a2add8f07835b41188f6deef39e47329058a2e5f8 7387064 emacs-gtk-dbgsym_30.1+1-6+deb13u1_amd64.deb 6cd8853e6ee3ec845f1adebe8a03b2afdcafb731c20d97e4306053265c61e66c 7807916 emacs-gtk_30.1+1-6+deb13u1_amd64.deb 8189879d33fba8323d91ef2416b9ab3329f935e1f6a70a72a330b1ccc2e9a745 7395612 emacs-lucid-dbgsym_30.1+1-6+deb13u1_amd64.deb 60017fb86c689e8fa082b7fded19f514c1fa1796db58d94af070caab29769633 7779404 emacs-lucid_30.1+1-6+deb13u1_amd64.deb dc96cd7acfe9e1ddacc2afbbd755b707052903b3bc2384e0ac7f04e1a36241bf 5716032 emacs-nox-dbgsym_30.1+1-6+deb13u1_amd64.deb fee9e5bc5d4c0da716e3e12eee8e1b063bd24a58a6ca6755be2516b377d50364 7262376 emacs-nox_30.1+1-6+deb13u1_amd64.deb 624ea13d3f7218e57b20a233cbb1583915d9fc0d55ed4e02043590357126bdb4 6929632 emacs-pgtk-dbgsym_30.1+1-6+deb13u1_amd64.deb eae6fad75d6672a7688df5610c85135ea8c1bc7dcabc8704df141d251ce84b34 7640456 emacs-pgtk_30.1+1-6+deb13u1_amd64.deb ed64f5e1d202e9b9f2e39c02b9049052c4bb94620464a99a55059aba6d380018 21510 emacs_30.1+1-6+deb13u1_amd64-buildd.buildinfo Files: edbe1583a2b79ea716dee2f32ea6a99c 255108 debug optional emacs-bin-common-dbgsym_30.1+1-6+deb13u1_amd64.deb 34498d9c1b80c91dc8eb000f15160c64 98408 editors optional emacs-bin-common_30.1+1-6+deb13u1_amd64.deb 5168d31d6ddb59ed359b07a2c06b409a 7387064 debug optional emacs-gtk-dbgsym_30.1+1-6+deb13u1_amd64.deb 67fd741131c42abc758874e881258111 7807916 editors optional emacs-gtk_30.1+1-6+deb13u1_amd64.deb cd44699bff65893ffa6f663109c73883 7395612 debug optional emacs-lucid-dbgsym_30.1+1-6+deb13u1_amd64.deb a77effaab79592aafe812974c2c60597 7779404 editors optional emacs-lucid_30.1+1-6+deb13u1_amd64.deb 0d507c4efe7c37ae3571ac9b86c1de0c 5716032 debug optional emacs-nox-dbgsym_30.1+1-6+deb13u1_amd64.deb 3e638f59d396592ab51717e07e812cf2 7262376 editors optional emacs-nox_30.1+1-6+deb13u1_amd64.deb 260f4d3a01cddfb39b817dd2d47fb6f4 6929632 debug optional emacs-pgtk-dbgsym_30.1+1-6+deb13u1_amd64.deb 82b77996894c06569dbf39b9530bb08e 7640456 editors optional emacs-pgtk_30.1+1-6+deb13u1_amd64.deb 7b76d1f9285d34162c1c8367f9f3e873 21510 editors optional emacs_30.1+1-6+deb13u1_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmqLZTgACgkQYg9P9sm2 dfEwwxAAw2U28+r57amRaYQEhO2zswJgP/R2e+sZYWSK42X70ykMGTU2Z5TtOCRr Pj9aED1PPli/izyi40jyqcl0MTBpsuipIUq1z1h2ScIErLUR8UE86i9ykN5Lncdj XYiZuWCU/bq9LSj+xqNrDUuhnbyHl8IkbrOEFk9PjXHhCwJdLJeCY/bmxU5bVA+I w5nJkcDwMaNeRuVFQwX7jIJXw3+gLbcpjNZtS78b5VWzYbhwHDOp5Yr+QQRZco4w ij1/uqV/rrtzn+LsHdCPnVnQtAQFR6p68MdX9m8i+wA12B6hDubDqRwxqi4TIsEv oTk1XKQANiAeawi+d7fdtOVFnhkUipMVY4l57iAngYgOzMoQmzpOJpE/g2tl/Ow/ hv6udS0vqIHzyopQOkrVpKjDPOcbNmb86w/iQaotmPjGCs0Rq8HXL/F9LOK/dRCr Y/Y8oq0W4k3aQH1eNZi2OQngYpriGDFaob8w19rgyjwugR5ejRNA3/EsyHzdBNHM 89C/6aR3jdHpzyE8Pau54B+5x4sSbxeRZyJTr2MsREQEylzFKKPNFPehNypB54PZ y6su0jANSE/9sSTS0i7/kovZyuVuYT1nphMVLNN0ZTZ3yzyD6sjZQAFgFJoFFBbc FDDVPSQJx9mQudD2byQ5V7v1UUnEArxbt9ookp51Dz7YNcR/5+Q= =Qrhk -----END PGP SIGNATURE-----