Accepted libapache2-mod-auth-openidc 2.4.9.4-0+deb11u3 (source) into proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 02 May 2023 12:59:57 +0200
Source: libapache2-mod-auth-openidc
Architecture: source
Version: 2.4.9.4-0+deb11u3
Distribution: bullseye-security
Urgency: high
Maintainer: Moritz Schlarb <schlarbm@uni-mainz.de>
Changed-By: Moritz Schlarb <schlarbm@uni-mainz.de>
Closes: 1033916
Changes:
libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high
.
* Add patch to Fix CVE-2023-28625 (Closes: #1033916)
segfault DoS when OIDCStripCookies is set
https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr
Checksums-Sha1:
cc44486f25fbf33009123780fc290fae8448eb5a 2682 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.dsc
47f8b949552c3d32f019c5cf785c4672dc0f8aae 261544 libapache2-mod-auth-openidc_2.4.9.4.orig.tar.gz
ac7ccfb5ecec4cdecd7ede4286da20991d75e256 7324 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.debian.tar.xz
125154ef4c72cfee86e778a9f073aafbbbddec7c 7193 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.buildinfo
Checksums-Sha256:
268ae6b52d6e853421b63894b17f656598f1abf7ce0452be2508e47bdeaecf97 2682 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.dsc
142ee7abd49a4c6e2a7233c9124143709e733e8e51896c4a4f4172b0ffbc4741 261544 libapache2-mod-auth-openidc_2.4.9.4.orig.tar.gz
2b593fdcd0482ef13c9523863661e46aa505ea43d92d322c737859ee5200ce28 7324 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.debian.tar.xz
b37a4779c0a9b221fe4b51cbb5dacb021c1741052f659fbb2cbdf11f1fa93d66 7193 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.buildinfo
Files:
5724f4ca0708c588c01513e294455399 2682 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.dsc
21959e96f73545012afec7201f5f46fd 261544 httpd optional libapache2-mod-auth-openidc_2.4.9.4.orig.tar.gz
95bf23311f2c90a5c443fc312ffe425a 7324 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.debian.tar.xz
c63f440fd9c611be652d00b1000fee32 7193 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=yu26
-----END PGP SIGNATURE-----
Reply to: