-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Apr 2025 15:38:46 +0200 Source: golang-github-alecthomas-chroma Architecture: source Version: 0.8.2-3+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Changes: golang-github-alecthomas-chroma (0.8.2-3+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Rebuild with golang-github-gorilla-csrf 1.6.2-2+deb11u1: - SECURITY UPDATE: + CVE-2025-24358 / GHSA-rq77-p4h8-4crw: Fix CSRF via form submission from origins that share a top level domain with the target origin. Checksums-Sha1: 652464fe9a5e717771fa92ff73d0a0751737ab20 2360 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.dsc 6fa5667f85b75a8a9e99f5375bc05c3b5568353a 637306 golang-github-alecthomas-chroma_0.8.2.orig.tar.gz fb5473276762ba39bf41b2e182742ddc125e9eb7 5068 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.debian.tar.xz d6f9a0a989ba5406498a8745e3285300f0f123a3 6218 golang-github-alecthomas-chroma_0.8.2-3+deb11u1_source.buildinfo Checksums-Sha256: b913beb09d20b555ad6f9f686a85686e0c366aca561b0c82197c17bbc2de08a4 2360 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.dsc b7b9bd2ff49a18127dd00cee0d8e1d262b861b0641f711cbf9c615431f2b9499 637306 golang-github-alecthomas-chroma_0.8.2.orig.tar.gz 67a93fc51100964eb2d5155e1ad100b011bb261f18fe4c009e66bba57fdb0ef8 5068 golang-github-alecthomas-chroma_0.8.2-3+deb11u1.debian.tar.xz 11b365f9fc387ef7278c6678538f65d246ee14f381f98f885f063edc85422331 6218 golang-github-alecthomas-chroma_0.8.2-3+deb11u1_source.buildinfo Files: 7a72f6ffb0c6d608ab2236ce8eeb0ccf 2360 golang optional golang-github-alecthomas-chroma_0.8.2-3+deb11u1.dsc ec43349661507b0da43abd6368b1e915 637306 golang optional golang-github-alecthomas-chroma_0.8.2.orig.tar.gz 1338b092a7c72382b993242d6a51b543 5068 golang optional golang-github-alecthomas-chroma_0.8.2-3+deb11u1.debian.tar.xz 458f613f52fc9f3362528632b8636489 6218 golang optional golang-github-alecthomas-chroma_0.8.2-3+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCaBIrSgAKCRDoRGtKyMdy YYH6AQDwu0ot53qfKyOHZoghqbFv92K2l4anD+1xUS7jSb9OhQD/XylfnSPaiZ3D yDBKmOwbm+7QGr3VAbJecZoWuT8rLwg= =lCk0 -----END PGP SIGNATURE-----