-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 May 2023 11:48:09 +0200 Source: libapache2-mod-auth-openidc Architecture: source Version: 2.4.12.3-2 Distribution: unstable Urgency: high Maintainer: Moritz Schlarb <schlarbm@uni-mainz.de> Changed-By: Moritz Schlarb <schlarbm@uni-mainz.de> Closes: 1033916 Changes: libapache2-mod-auth-openidc (2.4.12.3-2) unstable; urgency=high . * Add patch to Fix CVE-2023-28625 (Closes: #1033916) segfault DoS when OIDCStripCookies is set https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr Checksums-Sha1: e933486126bc52a4d9073146fc06c6429a1242ac 2293 libapache2-mod-auth-openidc_2.4.12.3-2.dsc b28bfe87ed1c754a2b458ca6752a8357995b424a 6876 libapache2-mod-auth-openidc_2.4.12.3-2.debian.tar.xz 08a5e8a2b0cdc86abf0b5ba9c2af8e02eb7755ad 8384 libapache2-mod-auth-openidc_2.4.12.3-2_amd64.buildinfo Checksums-Sha256: 04676a51e3872ff4eaf94bdad86a9f9c091695a23bea361983d08e6ea3a58189 2293 libapache2-mod-auth-openidc_2.4.12.3-2.dsc 52d2436d9f5a1adcc95071da5f1ba3e52cd845804c65bd6e3f6d20f6ac815a70 6876 libapache2-mod-auth-openidc_2.4.12.3-2.debian.tar.xz c802814705060d5e5cf85bf1a2274c2974dbc75ca9dffa55d3e5d3207c6f7d56 8384 libapache2-mod-auth-openidc_2.4.12.3-2_amd64.buildinfo Files: aed2f5b00b7385483e29bbc772aa7330 2293 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2.dsc a18154713dfbbf8706f3950a7aee98bd 6876 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2.debian.tar.xz 4fac0f9da7b3bc2bfadb4d0f59687f7f 8384 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJKBAEBCgA0FiEE3wEiR7/GVQGv8oRFDCS4Qcfduq8FAmRQ3XgWHHNjaGxhcmJt QHVuaS1tYWluei5kZQAKCRAMJLhBx926r0lGD/98Cd+YV77kKH4/r5IKjWf8XiPe CC3hpPy+qpBRwJY8Qpi5Vum1Ek40E9Ct9Aa6ztTBrlLvEg1QPO5Uc1vEIf0lTDgH 9rghG22KPsbO7stTT+/9mUx/YvmSlVUfwQ51UiXgwGdEWmNxwrEwrOPadPaiXTsO CKPqO06vA2iJW2UyGCzWO2pF1eh65jqIqjDG+31MxX0yjuIex8bknqxaF84A5rRC DmDfIg6nq6WGOVHaJT3HHUQFsXMUh/a1PBcgboNAoPTa+ms0WMxhRF0dNk0sCdyT oCe2TH85U1v3tPcypmr4U8dR682w8QP7jXhgVVTNqzx1+HLwfrM+kYhcWk4AIA/f qJ3QdtArfJMpVFeM+seXdUc6ievRYHbECl1N2MHABc1ebV4rcRaJO+fFZiEJMP04 Ceq0fTVXUVkGaUc7H847zHd5PdIQftKqgKaHB10DBWxQE7DvxTdK2Hdn27cpVZdW afot7FtO7HVNtwiQJGVKvE/H0GUKb1zqc2KDpNm7HBzIM4wnn0QJFYTKszprWZH/ 9f3s5GjifVgn1BKJSw/NkVdjUUNIuND4noekNdLJ+6Sc5a3jmdCzZV1vP35WF1EN YnleObhJ9XNY2HkcaNaRu1oeFloxBqIy6nD2THMK0hsJ2I/1BGaFfYtps4xtsBkn 9ecTsVnWtRgpSGoFOw== =QmpG -----END PGP SIGNATURE-----