Accepted libapache2-mod-auth-openidc 2.4.9.4-0+deb11u3 (source) into proposed-updates
- To: debian-changes@lists.debian.org
- Subject: Accepted libapache2-mod-auth-openidc 2.4.9.4-0+deb11u3 (source) into proposed-updates
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 18 May 2023 20:00:11 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.changes
- Debian-source: libapache2-mod-auth-openidc
- Debian-suite: proposed-updates
- Debian-version: 2.4.9.4-0+deb11u3
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=QBFbDRKv9AAvvsQkyN6OypwakokqmthSTHFB/vYFJUk=; b=q/3rPh8xFU1o3kHUQVYO/BFK0Y QX63dwG3L1lRnh4okbPuTmIrniVZleq7B4jb5RLFbuYPDfc+/9vb4BXa3zyxtZnZv7lZaGA7QQJ3a Ke1yXREsO3/JsqBKZnGH81kM6rPdbsg5O6aiPKwD1MTwaOxW7N8KN8ssttFbV+dZ0iejN9cRA3WAG qjijDHd8vqyqa50CJ2J8fhENsq6k/rnIq+B05K2ZZAp3og07gkSHoNEd8FTNfxPjsk1XN/pY7zlXm FFlGwXdExgDXo3WQn9uWSGLdKIvo8DdENE1U8A+OIPemkfQQWAliA+MxC0xyQcZPyH8S8TGDkMFCV afQlucVQ==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1pzjnH-004wxT-Ov@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 02 May 2023 12:59:57 +0200
Source: libapache2-mod-auth-openidc
Architecture: source
Version: 2.4.9.4-0+deb11u3
Distribution: bullseye-security
Urgency: high
Maintainer: Moritz Schlarb <schlarbm@uni-mainz.de>
Changed-By: Moritz Schlarb <schlarbm@uni-mainz.de>
Closes: 1033916
Changes:
libapache2-mod-auth-openidc (2.4.9.4-0+deb11u3) bullseye-security; urgency=high
.
* Add patch to Fix CVE-2023-28625 (Closes: #1033916)
segfault DoS when OIDCStripCookies is set
https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr
Checksums-Sha1:
cc44486f25fbf33009123780fc290fae8448eb5a 2682 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.dsc
47f8b949552c3d32f019c5cf785c4672dc0f8aae 261544 libapache2-mod-auth-openidc_2.4.9.4.orig.tar.gz
ac7ccfb5ecec4cdecd7ede4286da20991d75e256 7324 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.debian.tar.xz
125154ef4c72cfee86e778a9f073aafbbbddec7c 7193 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.buildinfo
Checksums-Sha256:
268ae6b52d6e853421b63894b17f656598f1abf7ce0452be2508e47bdeaecf97 2682 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.dsc
142ee7abd49a4c6e2a7233c9124143709e733e8e51896c4a4f4172b0ffbc4741 261544 libapache2-mod-auth-openidc_2.4.9.4.orig.tar.gz
2b593fdcd0482ef13c9523863661e46aa505ea43d92d322c737859ee5200ce28 7324 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.debian.tar.xz
b37a4779c0a9b221fe4b51cbb5dacb021c1741052f659fbb2cbdf11f1fa93d66 7193 libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.buildinfo
Files:
5724f4ca0708c588c01513e294455399 2682 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.dsc
21959e96f73545012afec7201f5f46fd 261544 httpd optional libapache2-mod-auth-openidc_2.4.9.4.orig.tar.gz
95bf23311f2c90a5c443fc312ffe425a 7324 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3.debian.tar.xz
c63f440fd9c611be652d00b1000fee32 7193 httpd optional libapache2-mod-auth-openidc_2.4.9.4-0+deb11u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=yu26
-----END PGP SIGNATURE-----