-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Sep 2025 12:39:13 +0200 Source: nncp Architecture: source Version: 8.11.0-4+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1115848 Changes: nncp (8.11.0-4+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent path traversal during freq/file (CVE-2025-60020) (Closes: #1115848) Checksums-Sha1: 04fd79907857942335db721e89b067ba8029455e 3062 nncp_8.11.0-4+deb13u1.dsc 4afdfda5bf85a2715b53c34e19c1e237826f9610 175004 nncp_8.11.0.orig.tar.xz 615bf2d2252281410babb8fd5a2970edf8f9904d 11216 nncp_8.11.0-4+deb13u1.debian.tar.xz e877b8ba12ab01e61ccb6ff244148b8a4a4c2d22 6151 nncp_8.11.0-4+deb13u1_source.buildinfo Checksums-Sha256: 8b866a223a5c46cfe2a07de9de773818ecd0753ad67c2898f2a309161bd10a43 3062 nncp_8.11.0-4+deb13u1.dsc 12b06a386994a908e4e4c36282e48972b849f39edb5d1f44550ab8bef89c7584 175004 nncp_8.11.0.orig.tar.xz c47f5c693212f898ab6d167a0c26b83217a74882b16b3e9bfeadfd31a4ac6451 11216 nncp_8.11.0-4+deb13u1.debian.tar.xz a676952b9b038d7a85d31b2af568569fe211c0e7a8a790edeeed5f429d422567 6151 nncp_8.11.0-4+deb13u1_source.buildinfo Files: 556c201d132ee1df58229618711e7ded 3062 golang optional nncp_8.11.0-4+deb13u1.dsc 722b08e8c4b0463c4ee84ebdbcec65f4 175004 golang optional nncp_8.11.0.orig.tar.xz 7d78fe3df831306e9453ec603f133c72 11216 golang optional nncp_8.11.0-4+deb13u1.debian.tar.xz 6cfb845fc81543b23146375dbee61b64 6151 golang optional nncp_8.11.0-4+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmjViopfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ECvYQAIA9QwC/v4Jih8wd4aImYRdy/SaLKW/Y duW7c7aHe3kC+UBtK/AfPKO9UC3lOGbJZD1Kcd1amMLSodhfQdELzaIQvIqztDPb Br2ByyLj+PA+5GP4iiCmXxWjwu/KX2SUIVEB+64B8uDdhVKXyemDuMCjNBAJWZf1 DyrIaqm6KQHCmq5BU7vUv1D5A/fh8R2LRojftsT+vdlQRQgqqmHhJpioMWVJ+cVW idtur2IROzmz1TDKJRO5Md4s/+cP+uDAOu9KINc9bxcKSVHgdWIkV8FJf5Lt9Ws7 nh9IElF1/gYVedv5wX5+Oh0BKSCmByy7R6c+qayKIWfuMrk6dnWhGdAyPeKFLgYN 4gmKE7KI7Yq5s3o3BxJ6wLahsL6GJksxEQB542VaPlcBYtN/0G9K07LW+MdnWyfV CYAZHav3KH3lzXvXAZcNSMMoIoZzf25xDkf/PWCKxEMwswR9Hwy0CAJ+hSGdElI7 t8I5Tjm2XtoVqdhWVpsw43/UHgPo/a0AObEnNteHKq4VUVrAG9D4E/th5eq6EW5l dRjGCGJFjgk5epEdeE3xZB69+zhNmq/ldhXDgUbGSCGDJZeGK218VmpQlO4kk1dv PKK46ATSkuHRwJJOrmJmIoXIvFyCLiA8LDSHLY49lvd79sFrqbAscPEeN7xoEcto YUEl6m1BH8qE =0+ww -----END PGP SIGNATURE-----