-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 11:01:31 +0200 Source: lemonldap-ng Binary: lemonldap-ng lemonldap-ng-doc lemonldap-ng-fastcgi-server lemonldap-ng-handler lemonldap-ng-uwsgi-app liblemonldap-ng-common-perl liblemonldap-ng-handler-perl liblemonldap-ng-manager-perl liblemonldap-ng-portal-perl liblemonldap-ng-ssoaas-apache-client-perl Architecture: source all Version: 2.16.1+ds-deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Description: lemonldap-ng - OpenID-Connect, CAS and SAML compatible Web-SSO system lemonldap-ng-doc - Lemonldap::NG Web-SSO system documentation lemonldap-ng-fastcgi-server - Lemonldap::NG FastCGI server lemonldap-ng-handler - Lemonldap::NG handler part lemonldap-ng-uwsgi-app - Lemonldap::NG uWSGI server liblemonldap-ng-common-perl - Lemonldap::NG common files liblemonldap-ng-handler-perl - Lemonldap::NG handler common libraries liblemonldap-ng-manager-perl - Lemonldap::NG manager part liblemonldap-ng-portal-perl - Lemonldap::NG authentication portal part liblemonldap-ng-ssoaas-apache-client-perl - Lemonldap::NG SSOaaS client for Apache Changes: lemonldap-ng (2.16.1+ds-deb12u9) bookworm-security; urgency=medium . * Improve CDC filtering (Closes: CVE-2026-12804) * Use OTP to store GitHub/LinkedIn states (Closes: CVE-2026-19349) Checksums-Sha1: 6df6f88d171495859ea17dd4980237bbae7fea2d 5253 lemonldap-ng_2.16.1+ds-deb12u9.dsc 1bc5038e0aade898e0f586de478823529d5f934a 9058612 lemonldap-ng_2.16.1+ds.orig.tar.xz 20d94ce7454c5a3764c466ab490408485b177c62 77696 lemonldap-ng_2.16.1+ds-deb12u9.debian.tar.xz 0f7a1331a0d783b9c657ad115293e66f6c31a413 5770708 lemonldap-ng-doc_2.16.1+ds-deb12u9_all.deb 4536559baef21967336904817fbe4ae1a9039c6c 82688 lemonldap-ng-fastcgi-server_2.16.1+ds-deb12u9_all.deb db5e3d1273d7f55b7cef1741df657b60f4461e2e 85076 lemonldap-ng-handler_2.16.1+ds-deb12u9_all.deb 776905179fc2282d117f5175f9e16bd0922831c4 73852 lemonldap-ng-uwsgi-app_2.16.1+ds-deb12u9_all.deb 255fef09221a3dd1443d6f137a257407cd757918 75944 lemonldap-ng_2.16.1+ds-deb12u9_all.deb 931b32d1cb22c9c55b19eb0a40386bf6c90d5ab1 22055 lemonldap-ng_2.16.1+ds-deb12u9_amd64.buildinfo 21ab74b0bfdef04eef863b5922117987ad333b63 209784 liblemonldap-ng-common-perl_2.16.1+ds-deb12u9_all.deb 330984a3fbe2394c90afbfa778cb68f7ed47acf9 125788 liblemonldap-ng-handler-perl_2.16.1+ds-deb12u9_all.deb 2e400f15efd398f76122158a24bb470db81d438e 486216 liblemonldap-ng-manager-perl_2.16.1+ds-deb12u9_all.deb 32e3bd82e72c7b2c040b0d2235c975aea9ae95d3 3061764 liblemonldap-ng-portal-perl_2.16.1+ds-deb12u9_all.deb 3fb24622e1c87fea906ddc8690510ea0f1df1b76 77532 liblemonldap-ng-ssoaas-apache-client-perl_2.16.1+ds-deb12u9_all.deb Checksums-Sha256: adde6436367c216408787c92d6d7700e68a0881af5194fdc8c38e074ce4d3a5e 5253 lemonldap-ng_2.16.1+ds-deb12u9.dsc 104513e429d2128d217d209c5ce66b8075a8314028ab509d3114a9555c53f6a0 9058612 lemonldap-ng_2.16.1+ds.orig.tar.xz f0456bfac797327c7f261fd701c961c8b67aa4382d9c294b23d9462895e1883a 77696 lemonldap-ng_2.16.1+ds-deb12u9.debian.tar.xz 0dde9784864e3c9297bed914b6a74be7776b21367ce6493be30141a53841950f 5770708 lemonldap-ng-doc_2.16.1+ds-deb12u9_all.deb d6fcb61a21028108e0414d2e5cd2a52709f96e96feaa6696b672d013de466c20 82688 lemonldap-ng-fastcgi-server_2.16.1+ds-deb12u9_all.deb de7c35c25c73438379e7b06a4644336e2b590685710aca83ce69df27f0f2bf97 85076 lemonldap-ng-handler_2.16.1+ds-deb12u9_all.deb 18cfadacede63f217991c92169d099d937f7e0a0bcc869d87a0e73aa2b8bfa83 73852 lemonldap-ng-uwsgi-app_2.16.1+ds-deb12u9_all.deb 68827770ad98e259dd600f7d61e8f3061a6e0deb037aed2488723b3ec27a69d5 75944 lemonldap-ng_2.16.1+ds-deb12u9_all.deb ded6173ec258fbfb9194eff2e10d6dda38b771765adf0886a211768189fa0a9d 22055 lemonldap-ng_2.16.1+ds-deb12u9_amd64.buildinfo b292ce61c261a10b52f9a6ecfd812a8c9c9038c60e9f39b8cd3fbe0a8dab2022 209784 liblemonldap-ng-common-perl_2.16.1+ds-deb12u9_all.deb d32c29490510fc6dc07bc01a2a90b51544f5aa82d73c26b664c46bf0721b3717 125788 liblemonldap-ng-handler-perl_2.16.1+ds-deb12u9_all.deb fc00c919cb34aa5cd5cb273cee998d64b7b3e26546bca5339294dac6ad51b941 486216 liblemonldap-ng-manager-perl_2.16.1+ds-deb12u9_all.deb b6f55613003c04053850dddbec779cb8c4369a211001c5c36ab26d62906be917 3061764 liblemonldap-ng-portal-perl_2.16.1+ds-deb12u9_all.deb cee27ba93ce39968be12ccf30c3ae7b94d852a492a6833549101fee855bd2e65 77532 liblemonldap-ng-ssoaas-apache-client-perl_2.16.1+ds-deb12u9_all.deb Files: 0212d79d4527ed5e9e70d7ae73e815ed 5253 perl optional lemonldap-ng_2.16.1+ds-deb12u9.dsc 196dcac2c80c9cdec488746d6c027716 9058612 perl optional lemonldap-ng_2.16.1+ds.orig.tar.xz 35ad6c0c4b56b8bd6e43da96a757e151 77696 perl optional lemonldap-ng_2.16.1+ds-deb12u9.debian.tar.xz 965bdd39c2f074a55d2610f1180613af 5770708 doc optional lemonldap-ng-doc_2.16.1+ds-deb12u9_all.deb 532f1123013faeef546883f1ca870484 82688 web optional lemonldap-ng-fastcgi-server_2.16.1+ds-deb12u9_all.deb aeffbcb6fcf7d6846125cd20248bce6d 85076 perl optional lemonldap-ng-handler_2.16.1+ds-deb12u9_all.deb d7f6210a632830692864eea78af611f5 73852 web optional lemonldap-ng-uwsgi-app_2.16.1+ds-deb12u9_all.deb ee30289bcad77f05adeca8e01db9ee17 75944 perl optional lemonldap-ng_2.16.1+ds-deb12u9_all.deb bea32769d495210044d1c3759123f1f5 22055 perl optional lemonldap-ng_2.16.1+ds-deb12u9_amd64.buildinfo 6b5faa3db0a803db0d7aabf47e95c3dc 209784 perl optional liblemonldap-ng-common-perl_2.16.1+ds-deb12u9_all.deb db2379f11e0639ecf38b55017721887d 125788 perl optional liblemonldap-ng-handler-perl_2.16.1+ds-deb12u9_all.deb c10fa99cbed43ebca320ca6dff55e951 486216 perl optional liblemonldap-ng-manager-perl_2.16.1+ds-deb12u9_all.deb f0c7949fcda39f13d3d816ed97300dd7 3061764 perl optional liblemonldap-ng-portal-perl_2.16.1+ds-deb12u9_all.deb d569a3c7ea304b63185314a97319da95 77532 web optional liblemonldap-ng-ssoaas-apache-client-perl_2.16.1+ds-deb12u9_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmp67eMACgkQ9tdMp8mZ 7umj1BAAg5lk+Rq1I9GajIUhO6VtdLMEvH/QZP4i1C3LdmsoYW2iH2snSiDQhtTf 2VlQbPriO5zI1KXUe/j6I5aTfWRTjLLzLyilMnR7WaCmj3xOb9I9IL8G54ldS0WU VZXyis8SNjL7ABHQvC+Qz1xOL9dv5BAmpgsxf9Jc4+KArd/XMkENlrS4W/YsFZKO zaoWDF5f5QayBna9kxcTQaPUwpoWclDi9LDewqeMsuGJy64prQiPpUC40ijB4XRM yJjdcGn52weQWkdRBUB7/gCTtqTMSVni3flh6IemuSC9qedpeqylrYYMcLaGHFON wHT+xeDBKnv1T2spSQugjmOiVoQcPxo5zAzWgI3sOR7DU8zmT3aIGTvSdPEMc85d Yyh3bTnczXR8h0pgzMciPLqUb/0NeZFJ5H94LqaP+yAK4K+asp/Bc6gBYFJNlLKy ITmSyyfVzYcqWAAgnbyixa3yUPFhECTd/E5tpuwaOwNd/sZSo9bxIBo70dpZjRzh rFFct68kjMBWpFb7z1ROHaGZi8SZFaCfUFE3dJabqQtS1/4Z8KEg2dsYTVDWa3tM s/nalYjPO2BMa7bILry50/LlYui841GiE3yeZ2SDWFeVpVOopYx1BORpQnO0/KE+ iYRIcN2ginjvAxhLw/i+z2Yh50DgXMA859b+UEMclmVnd/q7cBI= =3XLj -----END PGP SIGNATURE-----