-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 May 2023 12:59:57 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: armel Version: 2.4.9.4-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect authentication module for Apache Closes: 1033916 Changes: libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high . * Add patch to Fix CVE-2023-28625 (Closes: #1033916) segfault DoS when OIDCStripCookies is set https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr Checksums-Sha1: c29d6d2d6f5dca46e1ac0c8c1ecb5a58e8d36adf 311316 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_armel.deb d87d32793324131a1f2dcf90df9ac3bbab7a1bba 8090 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_armel-buildd.buildinfo 1621f220941e807785ab995825138fd7d5856b49 169496 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_armel.deb Checksums-Sha256: 147141f5488d36d395e24b533c779bf71f8743da18cccb430a2b01396c90cf4f 311316 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_armel.deb dcd4c5b71187c607ccfdf3bda0ab04f52a644dfee61a6f685a15bb1b28f663f8 8090 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_armel-buildd.buildinfo 151e20b2a358e7f11d57a5c04159b37005fce0dbd6bf6d4f9149c254e553c12d 169496 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_armel.deb Files: 698733c2256333dffb22cb17248dea8f 311316 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_armel.deb a9090ed1b4c7c3c0823ba7500acc0b83 8090 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_armel-buildd.buildinfo 9c8757da7dd247d7bf39df1195fca72d 169496 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUCZhpX7EW6FhRngRD7xMY/mIqXMFAmRij1kACgkQD7xMY/mI qXNnfxAAgUnKSkKJo3T1fKxYZj3BuGy769MPXnUquLYWcI/lX9DHnlxhrfLhSE/4 uhBh7NJvdgOGTaF0IfjKoe63TcxWatq3h4Kh/GRMA0KravFudeQC75IwMRR7Ajhs CQIJg9pjNU+ziaIjoZvjCNIUupnUwwH4iNM2CrJXQEeRU6MeB1Vey6TfF1JhBaC3 lOnmjmVb+aGCAZ3c9eibkuCAHGjJ6hxxcAehUuOddyKKpG8MFB/stnfgREVzi/Gv 3VC+fPC+vvpbtBA8pY7qwqw7XdjycKQv1fk8fvjqwZlvyP9J3YZ1b8Xu74ldeucY TVeL1h4/3uwgPNaVPRDg3JEUjrP8F7uPhSthj2YHApHzCqVc4XxJgf+AdG4et+tT oVxYzf6NaouZGmo6dfS17gFs3ywKXi23t67lEqFGFuwAcmQ0PT7ORrL9jgVkWVVG zft3lmOysArJU7/jgUZ/OKQL88sLDdSOrc9RVmjf8KHee0RNQhJgyHWaGgdR6DE5 6fuuShcLPTsw3ZIiLefX9bFf9y/u903DkZsPGmnv9m+CX0QxkkkjWMbVbdQT2ByE NfOGPMSb0lX8OtcFyLxlBGggpcrU2iWm2Iy5iAX25qBtqDelSYLkdz5mqF5uDzb9 QRio1t8ViKLZYIEi6Pmwiy9XrhoIC0oLfJUpJpthxT7na+wfCu8= =OgFc -----END PGP SIGNATURE-----