-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 02:26:54 +0200 Source: libapache2-mod-auth-openidc Architecture: source Version: 2.4.12.3-2+deb12u5 Distribution: bookworm-security Urgency: medium Maintainer: Moritz Schlarb <schlarbm@uni-mainz.de> Changed-By: Daniel Leidert <dleidert@debian.org> Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u5) bookworm-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * debian/patches/CVE-2026-54789.patch: Add patch to fix CVE-2026-54789. - Fix an out-of-bounds read and a one-byte out-of-bounds write in the state-cookie parser. Checksums-Sha1: 3f8a8c702edbdc60c1b42638776afcae6a4fbe6b 2295 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5.dsc b9ac80752e9df80a776dd3159c36b89235fcc566 273808 libapache2-mod-auth-openidc_2.4.12.3.orig.tar.gz f7fd29fcee18afd96cea021630a543294c2a9d27 24668 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5.debian.tar.xz 9671214cbbef683c0df3f0d79ec28c4b7838a14b 6399 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5_source.buildinfo Checksums-Sha256: f89ba1284c250479df1d56f9ee3de1aae0dc2bf77a6dc500083e4cb2847b61d8 2295 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5.dsc a40866cd1a16fdf9f0f5907c6261b8df2c2d8cc503eec66458ea9e90cc26aae9 273808 libapache2-mod-auth-openidc_2.4.12.3.orig.tar.gz 3759a4d28260132ae7e5f558d1b5466e19d4b57f642df3b3e187d210400c5c78 24668 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5.debian.tar.xz d0d02ddf0ef8c8860aee613a008fd9002cb0df425446f4dca05aa94e06062978 6399 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5_source.buildinfo Files: b0ff87ac01e869287d0031b4c039022d 2295 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5.dsc d380369f305e372e643ed64b22630f2f 273808 httpd optional libapache2-mod-auth-openidc_2.4.12.3.orig.tar.gz cd12edd3bc76455ca6d326b86ef123b2 24668 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5.debian.tar.xz 4b08dd7eef82dee1c5c678e1459073ee 6399 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmqYMM4ACgkQS80FZ8KW 0F3WgRAA1seCxj5n+R5DyQ+Tg8Nr6D69FC5OT2JNhHW3BXLYDGQeBzp1LfI7Kiul 1NzhwRCFgeFXOTAnq9Tqa2/6rUHBrDdWNTvdXzG+7Exoxwwdv6JRbn1w6tIAdst7 w+is2aLUZZ0zv+vn2y3viSz+ZK1bWAT4zQ3/eniAFsSF0cTuwz5/pwLsenxhEY87 Pvc5RenP8HqDjQySQe6qD391DnoDbgks7tjkvH0nDP1FjQZatSroLFmTllC25uWh FuSYipIKpw0ynApXiKOrxFC1tfQJjEviUPmb3qZhhcYn4T/VCPYj8iLWQARcmsj/ UZjU7cG/MuNPo6WiW6EmivrARIrJEzaiGdszXzvTiX+OAPYIdX2AeQiORv+4VR92 roSeMohiBS1DzFc99p6erdqWH8qLE7S0M/ZunY//vTj9IHhLr9sL5S4hrObcAHBl dKJw4JlGrGwx84Z+TJGarGRkt/3HHZ+wNVmiB1IWwIJB2B7zli2aF8DUzO4SNLtf NnoRte4bPMD8Z06oplm8gn678aG1icCoS9NtvYC4C5LjBRyCWogthSmWu0VZLFjK 6k6lM5lsUJcLtlPsoZLI/7Fx75dK6+KcE/OecY8udbOVd6lwGF6ImaPxtWho9V72 hFMfaV3EbQoGYYdulUgOzTryOUVMAq9SGt6A12eCz4SMUWQhIYQ= =nBQx -----END PGP SIGNATURE-----
