Accepted libapache-session-ldap-perl 0.4-1+deb10u1 (source) into oldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted libapache-session-ldap-perl 0.4-1+deb10u1 (source) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sat, 28 Jan 2023 01:50:22 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: libapache-session-ldap-perl_0.4-1+deb10u1_source.changes
- Debian-source: libapache-session-ldap-perl
- Debian-suite: oldstable
- Debian-version: 0.4-1+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=rj+DE7hwiaLkgiVGFoxzg2FFOhF4IsbGc4u10tvjt6k=; b=mHovW9OBh0mBXfC1dY3OK8yDOx 1COn8N6Q1Ffidq4n/21AWHoj2T8jpEOPwluqZbEmcAByfJYg+s8RAA29FxtxO6lBjNuiuzXFjp+E/ T/gdYwWEsfArO/5qjQt/r78Wz0YNLp9rSP6SrHRYb7yIIVPDNohnnB97PkBRBWW/wr3Xoc8hCzkXi qrs2Qk/I7O5LwBDD5HbbBr8eORZnirL5zObxwB9aF28m0xqrW69uT2KvNsWu+PHoUvMR1iFe2nYc+ y4Dy/HA3hsM6j+5Ty5CkIEpTWfR3pAiPjGd+kSOfcRVuSz8PftcrsjfxoblBcTYGUvVeFarvYvB12 q1Khh/rQ==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1pLaMI-001kEM-Ry@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Jan 2023 17:23:38 +0100
Source: libapache-session-ldap-perl
Architecture: source
Version: 0.4-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Changes:
libapache-session-ldap-perl (0.4-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* CVE-2020-36658: Validity of the X.509 certificate is not checked by
default when connecting to remote LDAP backends, because the default
configuration of the Net::LDAPS module for Perl is used.
This upload changes the default behavior to require X.509 validation
against the distribution bundle /etc/ssl/certs/ca-certificates.crt.
Previous behavior can reverted by setting `ldapVerify => "none"` when
initializing the Apache::Session::LDAP object.
Checksums-Sha1:
dece0be5c078f8d2fe4443bf8b51532e27e7a174 2259 libapache-session-ldap-perl_0.4-1+deb10u1.dsc
0c90bb47f5a023a81579bfb56b409205f820831b 3902 libapache-session-ldap-perl_0.4.orig.tar.gz
97014f580d41b9badd367e00b48b6d19bdd37fec 3568 libapache-session-ldap-perl_0.4-1+deb10u1.debian.tar.xz
82ae00a98693ccedd35a20fb2e748d6daebf3c3b 5836 libapache-session-ldap-perl_0.4-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
e5c6087ac1b395e3f16a5efd3fa5671b8b8b228658c75f502b00f19f48ea769f 2259 libapache-session-ldap-perl_0.4-1+deb10u1.dsc
394ad609a12d4f8290cb96797cc7251b614664a2cc28be8da9ac9d53df62dadc 3902 libapache-session-ldap-perl_0.4.orig.tar.gz
6a2c5c9d934bbea7a91d0d7d1f399fb4f1cb3f3b14b0852da4ac94c340d6b5b8 3568 libapache-session-ldap-perl_0.4-1+deb10u1.debian.tar.xz
4bab8b15d0413b7391ccb8509a392c2a5107e2e8770a6367e982958349536307 5836 libapache-session-ldap-perl_0.4-1+deb10u1_amd64.buildinfo
Files:
c13e2c967223ffedfdc45ed5b7b9d1d6 2259 perl optional libapache-session-ldap-perl_0.4-1+deb10u1.dsc
491e6389ef71822c0eeda7fe4019a569 3902 perl optional libapache-session-ldap-perl_0.4.orig.tar.gz
093c0cf8772564c36d71894b22e92077 3568 perl optional libapache-session-ldap-perl_0.4-1+deb10u1.debian.tar.xz
48afad144f34e4de77904b08efe471c0 5836 perl optional libapache-session-ldap-perl_0.4-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmPT+rUACgkQ05pJnDwh
pVLz2hAAzbBdL7Ojsu9Ry/2XAfdPKeJ2TFgYKRe8RP+F1Vg+c8F7KcTyUpGnujDc
ivgjnl/vwwDHjVyLKmFSY3ITJqkQniObTC/nREIC8wrxRUWx2BEMXtQbR0l+BF7r
lJAT6VJTyljiehvogjA8GQktn9HBwg8Sb289OtJwz6g0/bvcnuaEwBDIgYV6zhvE
YG3grxqfPelzRkS+uNW+lNosSx/J1jWltCQpK4LR7d+m4+9qTSpdcz2GBE8V6avZ
fDUn6zfkOuapTsMNdOZ8Hsvw+Itpk/PcVzke8bDmWWIj9cdDHo14GSu9XDh4CWyS
2DliCfluHkLzj+GEjZrHkaLA2OdbTNkPNxjF3gLxHvJlgTVHm8rYts0FeCjUbhpZ
icKqHSoPKnOT94+IIpkXcK5kWrVEfRskTw3Lo4H7p2izqSHqUY3udMhxbuFn12LQ
R1oqT0GwegI3Dh/p5E4zRHVH1gAHwPrnAeDIMrLJiLTM0qv7XXWeovF5YyA/hxhD
/Uvy/0wo6b2Kj0qryFEzXaD44xyBdY+KtcB0N18/TRRYiyd9LS8ba4VKNhnEyW4S
QJuM2O8d55yOT3NzJKI1N/Kj5qCM87Ef7xCf3e4Sm6xXCxplZdhVkK5Ddnit2ePl
2QZ8ETWQ6GqQ82jri3cA4xWYR4pdBZkmKwstR1d1v7JGfh2EP7I=
=ag8U
-----END PGP SIGNATURE-----