-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Apr 2025 16:22:55 +0200
Source: golang-github-niklasfasching-go-org
Architecture: source
Version: 1.4.0-1+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
golang-github-niklasfasching-go-org (1.4.0-1+deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* Rebuild with golang-github-alecthomas-chroma-dev 0.8.2-3+deb11u1 and
golang-github-gorilla-csrf 1.6.2-2+deb11u1:
- SECURITY UPDATE:
+ CVE-2025-24358 / GHSA-rq77-p4h8-4crw:
Fix CSRF via form submission from origins that share a top level
domain with the target origin.
Checksums-Sha1:
5815a8d406c653979957d0f27dbc159e6afabd18 1919 golang-github-niklasfasching-go-org_1.4.0-1+deb11u1.dsc
018c8fa95904ee97674a9242420d7be177eac76a 235884 golang-github-niklasfasching-go-org_1.4.0.orig.tar.gz
bb76b475794867eba1dd75640eb83d3c23b45584 3728 golang-github-niklasfasching-go-org_1.4.0-1+deb11u1.debian.tar.xz
11a90b0af4a0223bf45022bb740c5a988c07a9b2 6211 golang-github-niklasfasching-go-org_1.4.0-1+deb11u1_source.buildinfo
Checksums-Sha256:
8a6342ec6bc07d2d58f78ac976f0a6883855951b8a75008406a959e4f59c971e 1919 golang-github-niklasfasching-go-org_1.4.0-1+deb11u1.dsc
98f8bd82aed28be995f19c7dc9da825d3cbee3a1877abfd9541adfd98e335f2e 235884 golang-github-niklasfasching-go-org_1.4.0.orig.tar.gz
708d30b8283e7751cf19243001d9b5bc229ce256d60e61af702dc33b76becb47 3728 golang-github-niklasfasching-go-org_1.4.0-1+deb11u1.debian.tar.xz
3f75cefd4872ce38833ce23020859b93cdf4605fae2fd0cd5e2b56a1e04c7137 6211 golang-github-niklasfasching-go-org_1.4.0-1+deb11u1_source.buildinfo
Files:
d9de15a015984746151e76638ce7d19a 1919 golang optional golang-github-niklasfasching-go-org_1.4.0-1+deb11u1.dsc
a4dc2b1d3c04ba0c097fed66ff5d1722 235884 golang optional golang-github-niklasfasching-go-org_1.4.0.orig.tar.gz
9597b7a8eb3db41f2090c2b3b6732b5b 3728 golang optional golang-github-niklasfasching-go-org_1.4.0-1+deb11u1.debian.tar.xz
a01c09fb772ee7f64162bc04a680bcb4 6211 golang optional golang-github-niklasfasching-go-org_1.4.0-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCaBI18gAKCRDoRGtKyMdy
YV5YAQDU+Mze/IuGiLxfRT2XF9mlIRPsPKfdn4I5GXJJNnn/ggEAyeBCQ+ennitI
CFYCjKdcVLIjnXdFFn50GN8Jcb4jPQw=
=nwVD
-----END PGP SIGNATURE-----
Attachment:
pgpjVhYq9c5Hl.pgp
Description: PGP signature