-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 17 Aug 2026 18:49:23 -0300
Source: goaccess
Architecture: source
Version: 1:1.9.3-1+deb13u1
Distribution: trixie
Urgency: high
Maintainer: Antonio Terceiro <terceiro@debian.org>
Changed-By: Antonio Terceiro <terceiro@debian.org>
Closes: 1143181
Changes:
 goaccess (1:1.9.3-1+deb13u1) trixie; urgency=high
 .
   * Apply security updates (Closes: #1143181)
     Includes fixes for the following vulnerabilities:
     - CVE-2026-54715: Heap Out-of-Bounds Write in GoAccess `parse_browser()`
     - CVE-2026-55768: GoAccess WebSocket server: signed 32 bit truncation of
       the 64 bit frame length causes a remote pre authentication denial of
       service
     - CVE-2026-55777: Out-of-bounds heap read in parse_ios() via crafted
       User-Agent (opesys.c:323) lead to remote crash/DoS
   * debian/salsa-ci.yml: disable uscan test for this branch
Checksums-Sha1:
 4b2fb2367e02e4c08e7afe4e0f5d2836c56790ca 2023 goaccess_1.9.3-1+deb13u1.dsc
 f35aa15e7f9b7642168868d34684532d2929c808 156964 goaccess_1.9.3-1+deb13u1.debian.tar.xz
 abb33d319453831068c77e71e30061a4888b83f2 6574 goaccess_1.9.3-1+deb13u1_source.buildinfo
Checksums-Sha256:
 9bb9db61ebc19f06eb89b2cc4f60a23427a4bbd0174896f9461767a99426ab87 2023 goaccess_1.9.3-1+deb13u1.dsc
 2f477a3b3a06efae29680e649ae68c76db479eeccbd22a05f8c895d356e28710 156964 goaccess_1.9.3-1+deb13u1.debian.tar.xz
 866b3567aafd691e49eb4d32bc617f1b01f5f50c688a9c9394e1c2097df9363d 6574 goaccess_1.9.3-1+deb13u1_source.buildinfo
Files:
 c1c81ee4ab4e0ac262c715482f6e20ae 2023 utils optional goaccess_1.9.3-1+deb13u1.dsc
 ebed69f90b620dffb87d50e00bf6b910 156964 utils optional goaccess_1.9.3-1+deb13u1.debian.tar.xz
 01430c91e8bbd9cb16213f5f4f5f7f6b 6574 utils optional goaccess_1.9.3-1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=K1Vh
-----END PGP SIGNATURE-----