-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 May 2023 12:59:57 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: mipsel Version: 2.4.9.4-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: mips64el Build Daemon (mipsel-osuosl-02) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect authentication module for Apache Closes: 1033916 Changes: libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high . * Add patch to Fix CVE-2023-28625 (Closes: #1033916) segfault DoS when OIDCStripCookies is set https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr Checksums-Sha1: 4a2f1d9917a8a8209d770351c29f5c0913092d4a 324020 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_mipsel.deb ec5d9e9d007fa224a44b92a148ea58e9e5b312be 8026 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_mipsel-buildd.buildinfo 724a026514e2c93cd273f325972cae2c195a8d10 159272 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_mipsel.deb Checksums-Sha256: 93df59ab832487014de9742ae33eaebafd1d0d17c60016da4c177be7bb598d50 324020 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_mipsel.deb 16e46626a57bf26f02fafb839c46a10c054a158cde1fdf7b13b70d320d93f723 8026 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_mipsel-buildd.buildinfo 62d6d776b611b671c54a1d25127ea9e958758bc96f48ed9017cb01fc401f8e29 159272 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_mipsel.deb Files: cb8bfa9445ad84520e5442eed38f7298 324020 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_mipsel.deb 0c333ea1f5bc2794477acb706619fd29 8026 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_mipsel-buildd.buildinfo 73854698509073f17960b3956951754e 159272 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2zbpcZa+qSgfG9hJJ+DnhBlDinIFAmRij/IACgkQJ+DnhBlD inLlpQ//bApMkyCC0ZfvNihjiLgszu2h3knIHyXMDQjMb2xskE7Z0KNZLZmADDFW QqegiVtPA0BZrdNTMTNCq/TeefY1Yw5ABD1OzhAsaG8nTyHgK2mZMSJ07A7WERfH 0KaTk89Nf60In1nk/kKsRjJywB3VC33GfZQthAeJefN6/t6rzJANAPYjRSlUDwKB n7xkJriQ3BXVXpEedUyZKW2wMt4sJBjMuXaa5oTxdCpt9sF+xUFjddpIDt+rknjD 9qSY8ViNywhZPBlit06I73uKRJZQxK/R0Z8bRri/Q3kcx9N63VqlNIaCxfNdQWX8 mKgijhYFsPIyZhmgoN405J/UfTvZ9vAVndh0GedgFyMbpJ9D8xXPOjRH3UtH3+Oe rs5tHCffwAqE8PzC3pKCgJ0oDvW0LT6elTw26Dkd2WgTUxXpicDryYGYPPrkisfg faphsTn/6e0LVcptC8bmuEDWXytHrTjxGfxk+ijnUCB8UL86OSpsyFGR/MfwkEyV ZEdAK/6wALCMbe6W1Io4qZx8v6KLPFgLxfXsM0IKdSoZxnQgnpKNC1rwxx2rXC3Q W6ZQw7Oh3H40yffAyRjN40sgRZ85Os2zMTHMd27H0OpMHL6z/FFsSQydyICg1Lt8 mxExSu39yURXcckwrSyvwTBqb2bzNKWuMWHnkGy0T2QoTQPBwH4= =aAdx -----END PGP SIGNATURE-----