-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 May 2023 12:59:57 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: arm64 Version: 2.4.9.4-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect authentication module for Apache Closes: 1033916 Changes: libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high . * Add patch to Fix CVE-2023-28625 (Closes: #1033916) segfault DoS when OIDCStripCookies is set https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr Checksums-Sha1: 58765a9574a9b401b23f8e7bf78b7ba87f95e3a8 331028 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_arm64.deb 9674efb697dc4d232ecd4e4ebad02118f67b8d8a 8161 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_arm64-buildd.buildinfo bb7f7273ec240582150c2d238e879ca81193a0f8 168196 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_arm64.deb Checksums-Sha256: 535eedb1b0e86a7d63eac672304d95db98894f2c0e4a5b81e86eb5b98fca3e0d 331028 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_arm64.deb aaf2f35850a0f2ceb8c976e02a1281a12c527fb09f4812ad90957c0ff686ae04 8161 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_arm64-buildd.buildinfo a701636280610581864a507bb3a9daa6c9701d02442d29869dcd7c91bcb124ba 168196 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_arm64.deb Files: b79a795bc8387a131751c015ef887c4a 331028 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_arm64.deb 1d44db82efa5a80ba0369d779e2b604f 8161 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_arm64-buildd.buildinfo 61f53b24678b02cdd5aa628c5344c29f 168196 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuIolmszDbgxUhBbrMZO3llZhjs8FAmRij3YACgkQMZO3llZh js+CBRAAnTLoXn0+yNLbFVe8beJ13/n9z0bZv4H8960xjt1k8nktQOEAjqx6LZG3 o35lN9xU5qDmJ9XCHsa/AbRLNtkU/2q34oN3OF2DjKO3dUrx86MKOH7JTVgEwwyh P5jZvFR0z3WKS9RsCAA7QRXxlN9+som8E7hFb0xBpaUjd4T7OGkXeAO/AWXu6N4p uzg9+PawxaE0UvZTpnuir0k9UjYYCPfj8rCrPFNtXum+ms51Pjth7eIeccDp3beg TXiBRIobjTeawLTuyQ2WOm5QHZS02+HRSoTD64aQ3bxZnhVDaPQn6mutblxWK9ok juh1ChJQxx7SnURDh1T3OBJ5nR4Kqhi7lLrEzBRTyo29HVMp6B18yS1m33PDGKWv /QR3fQnOzM8NWyLh85fvSy5On1dM2PE9vD2HsYUizHyzfoasJHxGIhnCpaV7UNbJ vwAlRFzZWtJlWsYolqapTNFivfmZCE62EhhgH7KMvINSmeAUEQi5kGSBdoxAo2gL vhU5vZRhXnN/dgQFyQhB5N4oaqH3sFdBwnS5qijAIyWnUX7dBqPHGte5NieopK9M pT2esdfe0THAvvIDzShyGDlSY9jnL7MnUqXHxJrqO6k3ZQygdMo1A+wPQgmaP3Gj 2jZvkQmRjWzCnsf+wrDAkO1u0QE693tCW9roZX7YF5ObdbKhgls= =HFee -----END PGP SIGNATURE-----