-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 24 Sep 2026 16:56:00 +0200
Source: lemonldap-ng
Binary: lemonldap-ng lemonldap-ng-doc lemonldap-ng-fastcgi-server lemonldap-ng-handler lemonldap-ng-uwsgi-app liblemonldap-ng-common-perl liblemonldap-ng-handler-perl liblemonldap-ng-manager-perl liblemonldap-ng-portal-perl liblemonldap-ng-ssoaas-apache-client-perl
Architecture: source all
Version: 2.21.2+ds-1+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd@debian.org>
Description:
lemonldap-ng - OpenID-Connect, CAS and SAML compatible Web-SSO system
lemonldap-ng-doc - Lemonldap::NG Web-SSO system documentation
lemonldap-ng-fastcgi-server - Lemonldap::NG FastCGI server
lemonldap-ng-handler - Lemonldap::NG handler part
lemonldap-ng-uwsgi-app - Lemonldap::NG uWSGI server
liblemonldap-ng-common-perl - Lemonldap::NG common files
liblemonldap-ng-handler-perl - Lemonldap::NG handler common libraries
liblemonldap-ng-manager-perl - Lemonldap::NG manager part
liblemonldap-ng-portal-perl - Lemonldap::NG authentication portal part
liblemonldap-ng-ssoaas-apache-client-perl - Lemonldap::NG SSOaaS client for Apache
Changes:
lemonldap-ng (2.21.2+ds-1+deb13u4) trixie-security; urgency=medium
.
* Fix several security issues:
- Check client secret of public OIDC clients
(Closes: CVE-2026-92288, CVE-2026-92289)
- Test locationRules against the canonical URL (Closes: CVE-2026-95811)
- Force scalar context for request parameters (#3722)
- Pass vhost to getLevel() in grant() (#3726)
- Don't display passwords in clear text in portal forms (#3701)
Checksums-Sha1:
9b66c80ca305d89233af8fd3330e588fa7d02ce1 5240 lemonldap-ng_2.21.2+ds-1+deb13u4.dsc
1134c7fab303928f0c13939b00b8b0f66ebdbe1c 10035012 lemonldap-ng_2.21.2+ds.orig.tar.xz
0df9a0f5468b211e21c547e0a811697e7fa51d90 88116 lemonldap-ng_2.21.2+ds-1+deb13u4.debian.tar.xz
43a162297be26a06a4256c30bde48226e45564b3 6005520 lemonldap-ng-doc_2.21.2+ds-1+deb13u4_all.deb
73c60c8a0fd435ae4eb56ecea33fdcaeab39ad10 95220 lemonldap-ng-fastcgi-server_2.21.2+ds-1+deb13u4_all.deb
461ffeaea2e2aa29f265786f3a6fc76a3dabecda 98164 lemonldap-ng-handler_2.21.2+ds-1+deb13u4_all.deb
880391edf87cf8abb2ca42a348e1be945b547bd2 87468 lemonldap-ng-uwsgi-app_2.21.2+ds-1+deb13u4_all.deb
191d4d3ae7720f9ce922df95e080e3bed9c957c5 89188 lemonldap-ng_2.21.2+ds-1+deb13u4_all.deb
fdc6b7b4e3aaf2ae77ba434a790b768e3e82eff0 20550 lemonldap-ng_2.21.2+ds-1+deb13u4_amd64.buildinfo
e111640f3281c2e68ef67949b7e7ef1b30c39fa1 245472 liblemonldap-ng-common-perl_2.21.2+ds-1+deb13u4_all.deb
c121a0d39ab019a6fc57da0a71898522b997ac4f 137260 liblemonldap-ng-handler-perl_2.21.2+ds-1+deb13u4_all.deb
4f09670765e321ef6bf2c52827f630ae272e9f6e 1021072 liblemonldap-ng-manager-perl_2.21.2+ds-1+deb13u4_all.deb
fc43548964c9756fe0b86a8aac60c8a6673f0fbe 3123012 liblemonldap-ng-portal-perl_2.21.2+ds-1+deb13u4_all.deb
3d0da9d6c0445a70ca27ceb3a508f05aa0add4a7 90844 liblemonldap-ng-ssoaas-apache-client-perl_2.21.2+ds-1+deb13u4_all.deb
Checksums-Sha256:
5d70ac46198b9ea9d3d17f94cf509904d0c3cfd40935717c3a78e9eabed9f33c 5240 lemonldap-ng_2.21.2+ds-1+deb13u4.dsc
f43de36846f7e2a5a9cf399871efaa8f4bdf02bd7691e2453652b0f6332bec36 10035012 lemonldap-ng_2.21.2+ds.orig.tar.xz
5120131a43217496a4baf09fc5a4f173ee8a40476849bab82a6f9b81a8a9247a 88116 lemonldap-ng_2.21.2+ds-1+deb13u4.debian.tar.xz
d5f037911bd1a6d1d78b4509f9975b53472797f42fed14de97d5290d0900b944 6005520 lemonldap-ng-doc_2.21.2+ds-1+deb13u4_all.deb
83aebfb33c5a9cc1e5c90f7ba0bbdc07897ecea985f9ddbf52bfd2db0d6afb77 95220 lemonldap-ng-fastcgi-server_2.21.2+ds-1+deb13u4_all.deb
30c5378fe22f915cacd43e1a8ea1886e4ccb7ceff8db5cf502055a7012eb5280 98164 lemonldap-ng-handler_2.21.2+ds-1+deb13u4_all.deb
4e880753096d418ca0229891928aacebcaf0c801e5809b94660cf90e6c14da08 87468 lemonldap-ng-uwsgi-app_2.21.2+ds-1+deb13u4_all.deb
f2e63bd07a0c41b81e4b5478f7396cdf2868cd219ad32664110ef1763af533e9 89188 lemonldap-ng_2.21.2+ds-1+deb13u4_all.deb
a2a9d1ae4799fd918b501cb9b876c8060eef58db1aa8cd1f849dee66d793af0d 20550 lemonldap-ng_2.21.2+ds-1+deb13u4_amd64.buildinfo
bc266b2cf13b1b520fbe72652afbd4dc1ff6d50579aff48a5cb2c8c9bef589b8 245472 liblemonldap-ng-common-perl_2.21.2+ds-1+deb13u4_all.deb
27d27fd59a357f7f40f9118091be821dd3cb115a6f88ce02fbb0a430c9af4200 137260 liblemonldap-ng-handler-perl_2.21.2+ds-1+deb13u4_all.deb
77acd4ba5b2cf96e5b5cc1460c934586931ea817d82c3cce00d79ebc78db26b4 1021072 liblemonldap-ng-manager-perl_2.21.2+ds-1+deb13u4_all.deb
15d4094851f35aa35b4143afe0f885ee001732e27c733de474c0b4219890e500 3123012 liblemonldap-ng-portal-perl_2.21.2+ds-1+deb13u4_all.deb
ca7f34fb48bc420157a3fa7f6c522b66419f6b0a3450f0260b59fee62949d535 90844 liblemonldap-ng-ssoaas-apache-client-perl_2.21.2+ds-1+deb13u4_all.deb
Files:
5c01e094c29a317481f733a2fd7e43f6 5240 perl optional lemonldap-ng_2.21.2+ds-1+deb13u4.dsc
d530e0997f19f9a37cc9cb262f253841 10035012 perl optional lemonldap-ng_2.21.2+ds.orig.tar.xz
754607e212b35847f1778c431060efb1 88116 perl optional lemonldap-ng_2.21.2+ds-1+deb13u4.debian.tar.xz
967c966d9717bbdf4bce17a7e21e8fd4 6005520 doc optional lemonldap-ng-doc_2.21.2+ds-1+deb13u4_all.deb
e1ca8d557b3030c742ca079fa926b4f6 95220 web optional lemonldap-ng-fastcgi-server_2.21.2+ds-1+deb13u4_all.deb
8eaec1eeff436cae394df93c17a01681 98164 perl optional lemonldap-ng-handler_2.21.2+ds-1+deb13u4_all.deb
201e6b71bd819da0d24bd18f710bf6ad 87468 web optional lemonldap-ng-uwsgi-app_2.21.2+ds-1+deb13u4_all.deb
fc0e4fea79d4d4cd38f4ae774d816baa 89188 perl optional lemonldap-ng_2.21.2+ds-1+deb13u4_all.deb
09b497a3529525a5f01611f4ab5a4208 20550 perl optional lemonldap-ng_2.21.2+ds-1+deb13u4_amd64.buildinfo
b0f75125fcea42c312f3544306f3df1a 245472 perl optional liblemonldap-ng-common-perl_2.21.2+ds-1+deb13u4_all.deb
faaf20d763114a61cb854fa587666742 137260 perl optional liblemonldap-ng-handler-perl_2.21.2+ds-1+deb13u4_all.deb
9b9246c3f8d1bd4b3051392000582002 1021072 perl optional liblemonldap-ng-manager-perl_2.21.2+ds-1+deb13u4_all.deb
9dfe7b66cf244a2e958cf6e1ea192a43 3123012 perl optional liblemonldap-ng-portal-perl_2.21.2+ds-1+deb13u4_all.deb
b96add94b1f69382b5078917c1e9900f 90844 web optional liblemonldap-ng-ssoaas-apache-client-perl_2.21.2+ds-1+deb13u4_all.deb
-----BEGIN PGP SIGNATURE-----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=tOkW
-----END PGP SIGNATURE-----
