-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 25 Sep 2026 08:27:02 +0200
Source: lemonldap-ng
Binary: lemonldap-ng lemonldap-ng-doc lemonldap-ng-fastcgi-server lemonldap-ng-handler lemonldap-ng-uwsgi-app liblemonldap-ng-common-perl liblemonldap-ng-handler-perl liblemonldap-ng-manager-perl liblemonldap-ng-portal-perl liblemonldap-ng-ssoaas-apache-client-perl
Architecture: source all
Version: 2.16.1+ds-deb12u10
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd@debian.org>
Description:
lemonldap-ng - OpenID-Connect, CAS and SAML compatible Web-SSO system
lemonldap-ng-doc - Lemonldap::NG Web-SSO system documentation
lemonldap-ng-fastcgi-server - Lemonldap::NG FastCGI server
lemonldap-ng-handler - Lemonldap::NG handler part
lemonldap-ng-uwsgi-app - Lemonldap::NG uWSGI server
liblemonldap-ng-common-perl - Lemonldap::NG common files
liblemonldap-ng-handler-perl - Lemonldap::NG handler common libraries
liblemonldap-ng-manager-perl - Lemonldap::NG manager part
liblemonldap-ng-portal-perl - Lemonldap::NG authentication portal part
liblemonldap-ng-ssoaas-apache-client-perl - Lemonldap::NG SSOaaS client for Apache
Changes:
lemonldap-ng (2.16.1+ds-deb12u10) bookworm-security; urgency=medium
.
* Fix several security issues:
- Test locationRules against the canonical URL (Closes: CVE-2026-95811)
- Force scalar context for request parameters (#3722)
- Pass vhost to getLevel() in grant() (#3726)
- Don't display passwords in clear text in portal forms (#3701)
Checksums-Sha1:
7171ddbc222dee95052e9e3a3a6d1957c0632241 5257 lemonldap-ng_2.16.1+ds-deb12u10.dsc
1bc5038e0aade898e0f586de478823529d5f934a 9058612 lemonldap-ng_2.16.1+ds.orig.tar.xz
fd963c84d45d1683a10613aef603cec0b0378270 89080 lemonldap-ng_2.16.1+ds-deb12u10.debian.tar.xz
d17bfdde4adbd65227421e0ba6f04d6fd3125fa1 5771200 lemonldap-ng-doc_2.16.1+ds-deb12u10_all.deb
6ecd56918c084e502f9bf780a5707fdb8ef17350 82876 lemonldap-ng-fastcgi-server_2.16.1+ds-deb12u10_all.deb
32837ca3a994484590685a34ee505969f3e2df81 85260 lemonldap-ng-handler_2.16.1+ds-deb12u10_all.deb
678bea95e8989875f403aac03ac9df4f460c2647 74040 lemonldap-ng-uwsgi-app_2.16.1+ds-deb12u10_all.deb
ab6424a211f57d9df2262ca4edbce4f81a1ee384 76124 lemonldap-ng_2.16.1+ds-deb12u10_all.deb
33e5e7c988f9caa1f2f225ffc04884ef285b2123 22107 lemonldap-ng_2.16.1+ds-deb12u10_amd64.buildinfo
a2d4f9716a83fd2114a5f92f8d285908d0bf49ae 210516 liblemonldap-ng-common-perl_2.16.1+ds-deb12u10_all.deb
f7c282fd6e352ee0d1dd65c9a68cd09e00d3d83a 127420 liblemonldap-ng-handler-perl_2.16.1+ds-deb12u10_all.deb
5ba8c256b30ee8cf607b310484df21c24b5c0c8d 486360 liblemonldap-ng-manager-perl_2.16.1+ds-deb12u10_all.deb
7b70d0b18e684b0f873ad65cf9993fdbd2649885 3062300 liblemonldap-ng-portal-perl_2.16.1+ds-deb12u10_all.deb
aef11fc0284161fa9cd8f4ba21a9043c00f1f4ef 77736 liblemonldap-ng-ssoaas-apache-client-perl_2.16.1+ds-deb12u10_all.deb
Checksums-Sha256:
196ee2de350ddb7fdb2a71464e236213068a31774f3744001a9ccbd3bd650ae1 5257 lemonldap-ng_2.16.1+ds-deb12u10.dsc
104513e429d2128d217d209c5ce66b8075a8314028ab509d3114a9555c53f6a0 9058612 lemonldap-ng_2.16.1+ds.orig.tar.xz
e2e2a2a9ec9bb3a3fbc74c0b9cecbf2ad74d507d747c140fa482a7f08170958d 89080 lemonldap-ng_2.16.1+ds-deb12u10.debian.tar.xz
7c7940123080e033bc827553da3aa62a9aa154080c0baeb65448dbe4bf02919d 5771200 lemonldap-ng-doc_2.16.1+ds-deb12u10_all.deb
edb6fd86f0deb5d86e73789c9a2a1fa068cd169f91d60bb997f92ac2c4fc28e2 82876 lemonldap-ng-fastcgi-server_2.16.1+ds-deb12u10_all.deb
a7f266f6adde8652dc33347c936aa9ba4df1c9b60596715c53d0ddf195a7917a 85260 lemonldap-ng-handler_2.16.1+ds-deb12u10_all.deb
6b64cf6d9e4a03c4f9fea2fd2f834cc1c1eed38423c1f26e85841e3e87a10d22 74040 lemonldap-ng-uwsgi-app_2.16.1+ds-deb12u10_all.deb
5985dcd53871950d8a89481ed40c012b43c45a950ee758225093643954615d98 76124 lemonldap-ng_2.16.1+ds-deb12u10_all.deb
b53d49f87fbf5e53607676767fc18777a4fef6a60d62a2001e9df25af1b02579 22107 lemonldap-ng_2.16.1+ds-deb12u10_amd64.buildinfo
75f4a1a0a724a525c6ad822d0b64b4d22a29da708b21dacba5bcb22ef3bf15f6 210516 liblemonldap-ng-common-perl_2.16.1+ds-deb12u10_all.deb
182372f22af7166c61df01ba62f1ad1d288e259444b61ff97796a1c536d9b05b 127420 liblemonldap-ng-handler-perl_2.16.1+ds-deb12u10_all.deb
6e159621527ca2b00f7513e6ee8a5704c6cc518625b676efddd03b4e9c33f7bd 486360 liblemonldap-ng-manager-perl_2.16.1+ds-deb12u10_all.deb
15a123c6fb23896f4afda5c124ace6b7045e1f662bc88ea988a2a141fdf26e35 3062300 liblemonldap-ng-portal-perl_2.16.1+ds-deb12u10_all.deb
773f05c0b1ead6bdd5842e86356623b8ef42183415597f1b535b703b70b2bb83 77736 liblemonldap-ng-ssoaas-apache-client-perl_2.16.1+ds-deb12u10_all.deb
Files:
450f25762ef8525b97338aac5950befc 5257 perl optional lemonldap-ng_2.16.1+ds-deb12u10.dsc
196dcac2c80c9cdec488746d6c027716 9058612 perl optional lemonldap-ng_2.16.1+ds.orig.tar.xz
0cc570601860e8ca6f7928da88917c85 89080 perl optional lemonldap-ng_2.16.1+ds-deb12u10.debian.tar.xz
800974024fe4d251680ca6c54dfbd08e 5771200 doc optional lemonldap-ng-doc_2.16.1+ds-deb12u10_all.deb
38cf6ba0b90ee8609faf6d5aa1a9f06a 82876 web optional lemonldap-ng-fastcgi-server_2.16.1+ds-deb12u10_all.deb
c31d055790f6202ce2aec8daffc7b2db 85260 perl optional lemonldap-ng-handler_2.16.1+ds-deb12u10_all.deb
fb2e1f157bcb36a2719dd95d2eedc533 74040 web optional lemonldap-ng-uwsgi-app_2.16.1+ds-deb12u10_all.deb
28b47ea502770b57a871ad344227165b 76124 perl optional lemonldap-ng_2.16.1+ds-deb12u10_all.deb
1e44d70a1a34c7930deb6ed9bc2ef686 22107 perl optional lemonldap-ng_2.16.1+ds-deb12u10_amd64.buildinfo
c69ad4051bf78c21ed3ee01cd9328f02 210516 perl optional liblemonldap-ng-common-perl_2.16.1+ds-deb12u10_all.deb
abf952bf882766bfab36ce56899aef31 127420 perl optional liblemonldap-ng-handler-perl_2.16.1+ds-deb12u10_all.deb
e52ec559a56ebbe6cdffd149f1746737 486360 perl optional liblemonldap-ng-manager-perl_2.16.1+ds-deb12u10_all.deb
4065f37eae774ef9c57a6feba032ea56 3062300 perl optional liblemonldap-ng-portal-perl_2.16.1+ds-deb12u10_all.deb
22829f3967fd611a4ee444405df6510d 77736 web optional liblemonldap-ng-ssoaas-apache-client-perl_2.16.1+ds-deb12u10_all.deb
-----BEGIN PGP SIGNATURE-----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=bJoQ
-----END PGP SIGNATURE-----
