-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Aug 2026 23:08:26 +0200 Source: lemonldap-ng Binary: lemonldap-ng lemonldap-ng-doc lemonldap-ng-fastcgi-server lemonldap-ng-handler lemonldap-ng-uwsgi-app liblemonldap-ng-common-perl liblemonldap-ng-handler-perl liblemonldap-ng-manager-perl liblemonldap-ng-portal-perl liblemonldap-ng-ssoaas-apache-client-perl Architecture: source all Version: 2.21.2+ds-1+deb13u3 Distribution: trixie-security Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Description: lemonldap-ng - OpenID-Connect, CAS and SAML compatible Web-SSO system lemonldap-ng-doc - Lemonldap::NG Web-SSO system documentation lemonldap-ng-fastcgi-server - Lemonldap::NG FastCGI server lemonldap-ng-handler - Lemonldap::NG handler part lemonldap-ng-uwsgi-app - Lemonldap::NG uWSGI server liblemonldap-ng-common-perl - Lemonldap::NG common files liblemonldap-ng-handler-perl - Lemonldap::NG handler common libraries liblemonldap-ng-manager-perl - Lemonldap::NG manager part liblemonldap-ng-portal-perl - Lemonldap::NG authentication portal part liblemonldap-ng-ssoaas-apache-client-perl - Lemonldap::NG SSOaaS client for Apache Changes: lemonldap-ng (2.21.2+ds-1+deb13u3) trixie-security; urgency=medium . * Use OTP to store GitHub/LinkedIn states (Closes: CVE-2026-19349) * Improve CDC filtering (Closes: CVE-2026-12804) Checksums-Sha1: 5d32b506921ce5256637ada336ede2be900b83db 5240 lemonldap-ng_2.21.2+ds-1+deb13u3.dsc 1134c7fab303928f0c13939b00b8b0f66ebdbe1c 10035012 lemonldap-ng_2.21.2+ds.orig.tar.xz 2d808b95e61efd7883b51d525135b3474a799189 75588 lemonldap-ng_2.21.2+ds-1+deb13u3.debian.tar.xz 97da6d379df597bfee557b514576ab054bfb1259 6004652 lemonldap-ng-doc_2.21.2+ds-1+deb13u3_all.deb a59e2d00b5463f580bcaa3a11d5729c3f63fcc3b 95024 lemonldap-ng-fastcgi-server_2.21.2+ds-1+deb13u3_all.deb dd8ba5caa961ae73883d1e7c1d6a8e9df622f514 97976 lemonldap-ng-handler_2.21.2+ds-1+deb13u3_all.deb 06029a97b8a3620e361ba6555029c6783420dd00 87248 lemonldap-ng-uwsgi-app_2.21.2+ds-1+deb13u3_all.deb 5858a8971b43dc27265d2dd9bb8b95d4a2c86be7 88952 lemonldap-ng_2.21.2+ds-1+deb13u3_all.deb 756347217adf7405542de1927f6ecc6e99bbf144 20352 lemonldap-ng_2.21.2+ds-1+deb13u3_amd64.buildinfo 5a01e033dee48365aa6ad5b567da867b3d20fb40 244748 liblemonldap-ng-common-perl_2.21.2+ds-1+deb13u3_all.deb c9b07a61e5a1c96c629dbb6de40738ab5a54b91d 135692 liblemonldap-ng-handler-perl_2.21.2+ds-1+deb13u3_all.deb 81fd3cd55ba49db1737749cd57885ebb24cbdefb 1021448 liblemonldap-ng-manager-perl_2.21.2+ds-1+deb13u3_all.deb e6858be25c4d295ed7b58b706df009fd3c07a494 3122528 liblemonldap-ng-portal-perl_2.21.2+ds-1+deb13u3_all.deb 80c881ba02516f3a34134942d6e7898fe755db61 90660 liblemonldap-ng-ssoaas-apache-client-perl_2.21.2+ds-1+deb13u3_all.deb Checksums-Sha256: ccb1ce72b14217e4aab953bf95c1b529b9550e27b5ad6457a47efdf861e2023a 5240 lemonldap-ng_2.21.2+ds-1+deb13u3.dsc f43de36846f7e2a5a9cf399871efaa8f4bdf02bd7691e2453652b0f6332bec36 10035012 lemonldap-ng_2.21.2+ds.orig.tar.xz 90e68f2af9569755cbd9897a2ec9959902e601cf2ef94951b9cced9e36dc26d3 75588 lemonldap-ng_2.21.2+ds-1+deb13u3.debian.tar.xz bc51e53b9982ab0230802e2ca5f4fd2dc5a46127b6c2c9058974ab84d98e52af 6004652 lemonldap-ng-doc_2.21.2+ds-1+deb13u3_all.deb 0a4ed64cbc8157f8c0136e187fcb859db06b7f029d218e53f6067ea272ad6a03 95024 lemonldap-ng-fastcgi-server_2.21.2+ds-1+deb13u3_all.deb fe1acc1ddd4d22d010e6afb49b366e7b8e56505a2af65fc28f1bd9b30cf7bab5 97976 lemonldap-ng-handler_2.21.2+ds-1+deb13u3_all.deb 0733e8483789981e37a61c7cc2e099dd9f6c8a74b20250e96cec4ed5fb940a50 87248 lemonldap-ng-uwsgi-app_2.21.2+ds-1+deb13u3_all.deb ea817d3c729620086adb67163a3616891d8da00b1159640301ea3553a2ee6423 88952 lemonldap-ng_2.21.2+ds-1+deb13u3_all.deb 4f2f33cb88318b4b5e9fc70e2c0783895cb334ebf6f1124e6d955dde1c248866 20352 lemonldap-ng_2.21.2+ds-1+deb13u3_amd64.buildinfo f7b278ec2073b8537410d1dc04d05e070b8f81ac695e8c7ee9f2bbaf0c32d2da 244748 liblemonldap-ng-common-perl_2.21.2+ds-1+deb13u3_all.deb 6298d19bc0c7535aeda2f9fb7c289fe3fd312cbf049b8079175145eaac4e6394 135692 liblemonldap-ng-handler-perl_2.21.2+ds-1+deb13u3_all.deb acc65881dd6740e813f425f34d423ff672bb945adbb4f03f477c892f66c5e8f6 1021448 liblemonldap-ng-manager-perl_2.21.2+ds-1+deb13u3_all.deb 4c945cc535ca6699e20d850e25532d2c87b2a2646850e88ffb7ffc041ff31ca4 3122528 liblemonldap-ng-portal-perl_2.21.2+ds-1+deb13u3_all.deb f5ed53c0e116a1653d1f3dcc2b4caac5863ccdc38a382ac582bb1b848426153c 90660 liblemonldap-ng-ssoaas-apache-client-perl_2.21.2+ds-1+deb13u3_all.deb Files: 5d3a3e780ca4d501184750e458521646 5240 perl optional lemonldap-ng_2.21.2+ds-1+deb13u3.dsc d530e0997f19f9a37cc9cb262f253841 10035012 perl optional lemonldap-ng_2.21.2+ds.orig.tar.xz cf26a385f27a9fe335c76d5073b1701c 75588 perl optional lemonldap-ng_2.21.2+ds-1+deb13u3.debian.tar.xz 9ef5a63ef3a1facd989440700ee9eb2a 6004652 doc optional lemonldap-ng-doc_2.21.2+ds-1+deb13u3_all.deb 6f5a05da5ddfdbf4d58ba13c8d3dc1dd 95024 web optional lemonldap-ng-fastcgi-server_2.21.2+ds-1+deb13u3_all.deb 5ae225a80708e5cfaa62f94514e6ee4a 97976 perl optional lemonldap-ng-handler_2.21.2+ds-1+deb13u3_all.deb 28ff67d223fee8a9521d76be9a0445a5 87248 web optional lemonldap-ng-uwsgi-app_2.21.2+ds-1+deb13u3_all.deb a64a47f7ef7f4964c5a650499cd3cecf 88952 perl optional lemonldap-ng_2.21.2+ds-1+deb13u3_all.deb 1de970f04edaa75f5283e2ac8517a07d 20352 perl optional lemonldap-ng_2.21.2+ds-1+deb13u3_amd64.buildinfo 316aa8a11f9485ec5c7138fd01de6df5 244748 perl optional liblemonldap-ng-common-perl_2.21.2+ds-1+deb13u3_all.deb 3b5cd0354526e001112138d9526b1bb1 135692 perl optional liblemonldap-ng-handler-perl_2.21.2+ds-1+deb13u3_all.deb 2d110fef949a25049afc760e19f91cc9 1021448 perl optional liblemonldap-ng-manager-perl_2.21.2+ds-1+deb13u3_all.deb 04c7b4b9ad7c3d560a8f67f150b724a3 3122528 perl optional liblemonldap-ng-portal-perl_2.21.2+ds-1+deb13u3_all.deb d06dd6db77b3dd53bda2290afb2d8690 90660 web optional liblemonldap-ng-ssoaas-apache-client-perl_2.21.2+ds-1+deb13u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmp67XEACgkQ9tdMp8mZ 7uluuA/9GymJmv43qaR1EPT+RmD/no154dby2MNwfVxb9jxcjU/1jWRB/YGa3cxJ thA5GkTuyZ5wpkcdpjWzQ0MB47w0Lmn+fkmbIqMXHdTsvNhaB1b5ACZAOwlWH7zu 8kH21mOQPtxJjIzLv8Pc+4OHA9TGEasjDUHVFRzr2aKkMpdgrozm4PHYqNfMWn4F oOrFKx1bZ8xC9gUJUs4+04FZqm+bu6j2gT7Nkz0X+A5Ga9I6/eQ1pSoKKMPHS77O ARlSt1DpEzO322w3dnCQZQGRgHUIuIG/h2MqU+CxzSPCl3h2C1IGBEf4AxDgTtZQ 0JNl8X5QLCKpSs2sd9GmF3TPJ3B1uQHmEHquGcGgBmD2iJnXMTA6pk6hG68K8hid RawV8lYN/LYr35//I0tEKW2ojlNDl+N/3WD3Ipv8gLYffnchrygvSW17uR/xMsAI /hQTdK9lBNDR3boy5iwh40gDUGZmvKufapjNDv0NbDMQi/9MxBRsZblS3VYGtVKD KqFu8nLL+FwbWOVEKBDr8ArCIRouEh5zvXS37CvWkcMlMTTl9gQ073u3bVReQkGx 8vkxfXkfH3CvvNKA0sM8NorCcMHGEoBQ0euXQ78ywkjj94BDeLliVXAjO5KR8Kq7 8yeD6cafQ3JafkVrAhTEP0qHqsNLb7u7foch7xETnKJHwxxBXzI= =4+Hq -----END PGP SIGNATURE-----