-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 May 2023 12:59:57 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: amd64 Version: 2.4.9.4-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect authentication module for Apache Closes: 1033916 Changes: libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high . * Add patch to Fix CVE-2023-28625 (Closes: #1033916) segfault DoS when OIDCStripCookies is set https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr Checksums-Sha1: 4ac45a8637f2fa56a1ca49432468a2ab268eccd2 319320 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_amd64.deb fbcbc0f30838072c5bc5f43ae4355e86c200494c 8207 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_amd64-buildd.buildinfo 2b09b1dacc9b6cd195d4376f84a9c19f5eb78839 180616 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_amd64.deb Checksums-Sha256: dbc72d38e848a7edd8766b78da7e4889a015206656bd0d4f438808132a073a20 319320 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_amd64.deb de26a08315c92135f7da10e98a701b07cbb8408314620e932cce83475e15234a 8207 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_amd64-buildd.buildinfo 605a54aaf4e12b25e5259f52382a85d375ebb2e1ec0c397e0e3bbae68e067548 180616 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_amd64.deb Files: 39ee39dd8ec027c956d16d11af4c7a1b 319320 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_amd64.deb 34c6c6b09ae2da0809001dc6deba55b4 8207 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_amd64-buildd.buildinfo 56ec66d0073885b68ebe0160fca6f8ae 180616 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7bJOCbihllHz5a8G6bGbnoZY/NwFAmRij0YACgkQ6bGbnoZY /Nw4cw/9Ge+brR/XmdRQ6RVGQenfF5LDy8qCrkeVndlL4FSlJ/sWABnKR172Bf4m U6pJdZREIjUMAnYiGdiHVVivguHbnwaazxInlREQ6u5UHGgTCq42lEj7JF+LJ6fR IcDA8SkcH0l2rsehi5fevLqxyc8TdvkUP8vnRLuoLjv1I6ZzpCtaM1i4SB8KIN27 3ENDu1P1gbKmkdSf2LYp4EdguY1tZHOCsp+32slIkzR5+8/TMO+V+HjKIDDoCCiA VbZKRJPu+PKzI7DBPZiKyn52C38hEd8+ipZpdBGJg6qBSbZYgHj4+y+oMO6sD6xW 087tvltYWIFntqVaF0/h7ZF/a7eIspQpXXKVtbu85Tl5PUD+eyUQIAiZexnHM3Ng VlzQnE//yFFvAcu5CtqCGOvp+faFWQvgLDf9zhCM8pXtt+5XA5X9FIJ1XSBnDmdl 7MAo23Kl/oZpYkLdM7IwCTo02IKU9ajYHxIQ/MrqAx5rieyf4MIHQROlxl6BK7a0 Sul+gbW/7cofOTqMCX08zWMqIyet4T++a9WAiFdMC+YjFAAABaWhlDuhQ8bLIjJV r5y8hEy9fQaGsfn8D9K4C3Tdo0tHW1sC/H7Gp4CchY5HZnLIuPwc8z0u4g8hDoUN STcT4yRdRqXAMrAEBOMa3zTThHZ+oq88LHMbDDXDH9qSEtZIqEE= =dKqr -----END PGP SIGNATURE-----