-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Apr 2025 15:38:46 +0200
Source: golang-github-alecthomas-chroma
Architecture: source
Version: 0.8.2-3+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
golang-github-alecthomas-chroma (0.8.2-3+deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* Rebuild with golang-github-gorilla-csrf 1.6.2-2+deb11u1:
- SECURITY UPDATE:
+ CVE-2025-24358 / GHSA-rq77-p4h8-4crw:
Fix CSRF via form submission from origins that share a top level
domain with the target origin.
Checksums-Sha1:
652464fe9a5e717771fa92ff73d0a0751737ab20 2360 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.dsc
6fa5667f85b75a8a9e99f5375bc05c3b5568353a 637306 golang-github-alecthomas-chroma_0.8.2.orig.tar.gz
fb5473276762ba39bf41b2e182742ddc125e9eb7 5068 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.debian.tar.xz
d6f9a0a989ba5406498a8745e3285300f0f123a3 6218 golang-github-alecthomas-chroma_0.8.2-3+deb11u1_source.buildinfo
Checksums-Sha256:
b913beb09d20b555ad6f9f686a85686e0c366aca561b0c82197c17bbc2de08a4 2360 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.dsc
b7b9bd2ff49a18127dd00cee0d8e1d262b861b0641f711cbf9c615431f2b9499 637306 golang-github-alecthomas-chroma_0.8.2.orig.tar.gz
67a93fc51100964eb2d5155e1ad100b011bb261f18fe4c009e66bba57fdb0ef8 5068 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.debian.tar.xz
11b365f9fc387ef7278c6678538f65d246ee14f381f98f885f063edc85422331 6218 golang-github-alecthomas-chroma_0.8.2-3+deb11u1_source.buildinfo
Files:
7a72f6ffb0c6d608ab2236ce8eeb0ccf 2360 golang optional golang-github-alecthomas-chroma_0.8.2-3+deb11u1.dsc
ec43349661507b0da43abd6368b1e915 637306 golang optional golang-github-alecthomas-chroma_0.8.2.orig.tar.gz
1338b092a7c72382b993242d6a51b543 5068 golang optional golang-github-alecthomas-chroma_0.8.2-3+deb11u1.debian.tar.xz
458f613f52fc9f3362528632b8636489 6218 golang optional golang-github-alecthomas-chroma_0.8.2-3+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCaBIrSgAKCRDoRGtKyMdy
YYH6AQDwu0ot53qfKyOHZoghqbFv92K2l4anD+1xUS7jSb9OhQD/XylfnSPaiZ3D
yDBKmOwbm+7QGr3VAbJecZoWuT8rLwg=
=lCk0
-----END PGP SIGNATURE-----
Attachment:
pgpqfEZyMlz8i.pgp
Description: PGP signature