An emacs25 security update has been released for Debian GNU/Linux 9 Extended LTS to address a missing input sanitizing.

ELA-858-1 emacs25 security update

Package : emacs25
Version : 25.1+1-4+deb9u2 (stretch)

Related CVEs :
CVE-2022-45939
CVE-2022-48337
CVE-2022-48339
CVE-2023-28617

Xi Lu discovered that missing input sanitizing in Emacs could result in the execution of arbitrary shell commands.

ELA-858-1 emacs25 security update