-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 May 2023 12:59:57 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: i386 Version: 2.4.9.4-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect authentication module for Apache Closes: 1033916 Changes: libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high . * Add patch to Fix CVE-2023-28625 (Closes: #1033916) segfault DoS when OIDCStripCookies is set https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr Checksums-Sha1: a5b68a1687b52dd16fa4f2f9b74fa380e2812c55 250128 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_i386.deb 26d50efc6dff6445fa35e4a9287f3649bf982840 8146 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_i386-buildd.buildinfo cc42af152069e9ba1658ef0def0fd1abd2d47fab 188212 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_i386.deb Checksums-Sha256: c1a9311cf827266b91d5f8bd433a50c98266dc494ac33dc366750cc570a178e1 250128 libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_i386.deb 78f5deff5a63c0619e3921c6382b1a755aefc64ba898fe2079e6b0787d5b1dd0 8146 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_i386-buildd.buildinfo d39ca75083bc8eb2c26911e709a8afb4771f814ab76c039fb5186a1e26ddb23f 188212 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_i386.deb Files: c07f4a3079305e4498adef53e51b4b9f 250128 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.9.4-0+deb11u3_i386.deb 7a30bbf0bfcc01b500758c45c2fcce09 8146 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_i386-buildd.buildinfo f0ca96ca30ca7c2499f19702cb00746e 188212 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7bJOCbihllHz5a8G6bGbnoZY/NwFAmRijwkACgkQ6bGbnoZY /NwdnQ/6Ays8TXxsgDjFNYohjRBgi/VW5W010zeFUu7iyWSBlnQGw2qlWJQciUML 8SDRdKFxZC7wxUooNM1MM1dG+PeOKW4CsoPWI58XBfuZEjOZ5TI8Mn4V5hjSO/sx 0qAxHFv/q90Q24y5oVK5V65R4e0g54X6MfpXCXiebDAGQJ+sFQoK4BzmneY3DR6s +AY2nMPAWE019SfRZVZ/G0RZT+48/SgqaVFrR48oIsZpva98/sQjxkSEXYCM9DOo 3hvwGreDJrfLj14O3Zb2nhBxJH8abtsvKNS3elziOu37TUwHE5tmHQQkc4PXa8+Q Yl5xnpVe2GhgPvg79rGFUvMoNn8nP6w2ceTh3eIfjjsvP66tNQLQl1FKfHvqLKSw YdbGnNuSeuJmY4IPT579wqdCkaDGvoOzouXnrinmvOVtgAmRxTkWQsoPGcKa3B90 nzrKWNZgKEP2z03U6Z9dzL3bMECZIts5xiw10mkRpb49Gz/0R9PCytuC+evmsuHX SwREHrLcBnCh0CbpQKasPrhuS3t85nOQtKG/GWBsxs5SfGSKdESZDhKTIr1MBeW0 e9l/iKLAZa9lOuzc5ei/MmV+ppAK2rWpDI5CaMGRZtwbkMa6SzCVKItFZCoVLY0N se3AeCOxYyJDRmwoPHnHSWsIGFeya+tFsV4I8Qf5qc3H36uZE+E= =Lv9I -----END PGP SIGNATURE-----