-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Apr 2025 17:12:05 +0200
Source: golang-github-yuin-goldmark-highlighting
Architecture: source
Version: 0.0~git20200218.d1af22c-1+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
golang-github-yuin-goldmark-highlighting (0.0~git20200218.d1af22c-1+deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* Rebuild with golang-github-alecthomas-chroma-dev 0.8.2-3+deb11u1 and
golang-github-gorilla-csrf 1.6.2-2+deb11u1:
- SECURITY UPDATE:
+ CVE-2025-24358 / GHSA-rq77-p4h8-4crw:
Fix CSRF via form submission from origins that share a top level
domain with the target origin.
Checksums-Sha1:
8457edfc31d9260574e289578c44a945b9079fa8 2050 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1.dsc
d777e8df1956db19316cb5c174bf6a1ee759cf68 10192 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c.orig.tar.xz
888afd1e150bb30d9c23befcacf3e9bd7e67ffc4 2868 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1.debian.tar.xz
f67bfe533419ebd4bf24c6d0d4390face2922808 5910 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1_source.buildinfo
Checksums-Sha256:
4a6c667c717b817fc184fe6cefae9c06888d86cc71fe74fccb73bdfa58d1a5e1 2050 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1.dsc
aca3d1415fc1b9bea4de7ca4c94e0ea94a56c4e387923958b127a5d606355648 10192 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c.orig.tar.xz
5392bdb223c74e41d82542389564d7736056a449b7833864c298bbe9f39216ab 2868 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1.debian.tar.xz
fa5e11bdd2d1d397d6753c539ceab52107dba4dbb2362d13ac47e384743c45a6 5910 golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1_source.buildinfo
Files:
2d96bf8f5730267246bb1113b93d87ad 2050 devel optional golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1.dsc
acba54da9a4be3ec251cc2cb4cf13646 10192 devel optional golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c.orig.tar.xz
bce0fc99e663e8969c4f0dbd98f50985 2868 devel optional golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1.debian.tar.xz
86384f7949f16e57ea893f323ad409cb 5910 devel optional golang-github-yuin-goldmark-highlighting_0.0~git20200218.d1af22c-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCaBI97wAKCRDoRGtKyMdy
YUtlAQCbAJ7iHcLARGVYdeZ7effP4SoUmrmUWRlG8OUA57cUvAEAxk3qXwkZJdvz
t8JIn0ki9l5IN+sGgrWUkPswnn8p3QI=
=60q1
-----END PGP SIGNATURE-----
Attachment:
pgpoz_U89w_TE.pgp
Description: PGP signature