-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 01 Nov 2025 06:44:07 -0400
Source: golang-github-cyphar-filepath-securejoin
Architecture: source
Version: 0.4.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Reinhard Tartler <siretart@tauware.de>
Changes:
golang-github-cyphar-filepath-securejoin (0.4.1-1) experimental; urgency=medium
.
* Team upload.
* New upstream version:
- SecureJoin now rejects malformed or unsafe root paths (e.g., unclean
paths), cf
https://github.com/cyphar/filepath-securejoin/releases/tag/v0.4.0
Checksums-Sha1:
385f363b029b1f1807e117fb9a2f7d79bbaf45a5 2479 golang-github-cyphar-filepath-securejoin_0.4.1-1.dsc
f63be1caaa55522c3578a6144ab976982cb1af8a 52784 golang-github-cyphar-filepath-securejoin_0.4.1.orig.tar.gz
aa799cf442327dc73a9091b9abbf10f000fa897e 4060 golang-github-cyphar-filepath-securejoin_0.4.1-1.debian.tar.xz
Checksums-Sha256:
ae505799d21d71c160d3c11f96a01a0127d17df4556173545b73fbaa2612c2a5 2479 golang-github-cyphar-filepath-securejoin_0.4.1-1.dsc
44063b1b494b5b8ce3e957b987657a37d28640b88ae04f24475f3b57df2829df 52784 golang-github-cyphar-filepath-securejoin_0.4.1.orig.tar.gz
1fa029918bd73506a97234b571bb48dd43a745713551d864762a9acc8d96a9aa 4060 golang-github-cyphar-filepath-securejoin_0.4.1-1.debian.tar.xz
Files:
a81ac35cb23ecade3d4c8b19e123d49c 2479 golang optional golang-github-cyphar-filepath-securejoin_0.4.1-1.dsc
49266ebd15a0c2d9f339d993ff8b704a 52784 golang optional golang-github-cyphar-filepath-securejoin_0.4.1.orig.tar.gz
97045b5ef068522608b3aa73cfca788f 4060 golang optional golang-github-cyphar-filepath-securejoin_0.4.1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=puWv
-----END PGP SIGNATURE-----
