-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 17 Aug 2026 18:49:23 -0300 Source: goaccess Binary: goaccess goaccess-dbgsym Architecture: amd64 Version: 1:1.9.3-1+deb13u1 Distribution: trixie Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Antonio Terceiro Description: goaccess - log analyzer and interactive viewer for the Apache Webserver Closes: 1143181 Changes: goaccess (1:1.9.3-1+deb13u1) trixie; urgency=high . * Apply security updates (Closes: #1143181) Includes fixes for the following vulnerabilities: - CVE-2026-54715: Heap Out-of-Bounds Write in GoAccess `parse_browser()` - CVE-2026-55768: GoAccess WebSocket server: signed 32 bit truncation of the 64 bit frame length causes a remote pre authentication denial of service - CVE-2026-55777: Out-of-bounds heap read in parse_ios() via crafted User-Agent (opesys.c:323) lead to remote crash/DoS * debian/salsa-ci.yml: disable uscan test for this branch Checksums-Sha1: 4a5455db6f334552610ffb476caa53a9204d88a3 475256 goaccess-dbgsym_1.9.3-1+deb13u1_amd64.deb dbf205091f6d0a1d4662a34061462e7815fde951 6171 goaccess_1.9.3-1+deb13u1_amd64-buildd.buildinfo 779e8e84164d8f28fa6bf8aa26f4409b497c4076 428752 goaccess_1.9.3-1+deb13u1_amd64.deb Checksums-Sha256: 3c919f354d67d7917d0cd3d104baa667bbccf5a7edc23be4fd387259ff2c9f72 475256 goaccess-dbgsym_1.9.3-1+deb13u1_amd64.deb 7bfc8166c81e81484d8931051572ed5e5b65568c745051bb568d78f831da8106 6171 goaccess_1.9.3-1+deb13u1_amd64-buildd.buildinfo 37c1d1fe9f099c884fb92bf84eda7a80fe46f620119e293bc7e838768b1dc4a2 428752 goaccess_1.9.3-1+deb13u1_amd64.deb Files: 1221b5984879b60a99f44ae2438672d3 475256 debug optional goaccess-dbgsym_1.9.3-1+deb13u1_amd64.deb cf8a8371cb202b8e8f7890ca462a9c7d 6171 utils optional goaccess_1.9.3-1+deb13u1_amd64-buildd.buildinfo 4620c00dc8aa8e763383e4de0adcbaf4 428752 utils optional goaccess_1.9.3-1+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmqcdMAACgkQYg9P9sm2 dfGyTxAAraLGJbP3alkuXqwGy2EzY7oGL2NMeXPyw9FrqnIgUA+8xpr60KJBvOLf Z6ZdOzRI+FacroYdfSYCBa4woLm4fJ1xC8KxxAkKC/4RJ15vJpvnMAJiUmMgTn0F g0JGn8zZjytsGJM5b/wo1sLuP8ArrycjZJDho+t3nXPFN8DyO1uB7LkqmRPTwvGb srxYpU/ZpFsZf1YH/NZLw47qkJjlXhG7jEyGgIE7h93cgoKVZm6lDj7fJ2mnndJT CV2RVOuhJvX45JOblC1+KKNLj3LI7CAqezWuq8q0p8L0jTaAW0O9f6jKxLabSgmS J/3r0Yj8lAL2nq5EEAneJqBcFcw99c4w80g704bAM8Fyb+AT6dDh7ZxeoUXqCgxL N9rgHY7ZBG1f6A2nNWsIXqeKRbhWKqeksXTp4Nti6N31yvi4N/NeJyp05ikfMEqc +AfDiqgKtzG/S4sscS2/PTzinO7Uy5QtxrZTo9j8A68hsbF56BHEWpy4L5h06Kbn PG8bLwIn3HGam7eFH+TwkHDnEEgMmBqh/X7jpmg2H8hLajQGP9ddTWGekUzhPL2D 25SenfoxuKbfysyakXEIeF1QJThe3ks+aUNpj2Nw1/BZlVQkHIOyna1mrMWDpa06 JH60oRjKX1wrAfjpSWSExMrLrUGnOrBSUqiSbCNAQO21RenR8B0= =NSqq -----END PGP SIGNATURE-----