-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 24 Nov 2023 08:15:30 -0500 Source: glewlwyd Binary: glewlwyd glewlwyd-dbgsym Architecture: arm64 Version: 2.5.2-2+deb11u3 Distribution: bullseye Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Nicolas Mora Description: glewlwyd - Single-Sign-On server with multiple factor authentication Changes: glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium . * d/patches: Fix CVE-2022-27240 possible buffer overflow during webauthn signature assertion * d/patches: Fix CVE-2022-29967 static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome instead of linking it * d/patches: Fix CVE-2023-49208: possible buffer overflow during FIDO2 signature validation in webauthn registration Checksums-Sha1: 481c80c5066709c1873040bf0d5897630f9ef302 1030888 glewlwyd-dbgsym_2.5.2-2+deb11u3_arm64.deb b089f312149d36c19954619379f8b98abc2d8f88 8742 glewlwyd_2.5.2-2+deb11u3_arm64-buildd.buildinfo fd50dadb3b49de01f3e76e6e1ea845f64d304622 446216 glewlwyd_2.5.2-2+deb11u3_arm64.deb Checksums-Sha256: 9c1afe19512064538cffcd1602597ddf4fcd582063579beaa3b247501f2b2274 1030888 glewlwyd-dbgsym_2.5.2-2+deb11u3_arm64.deb aa0d06be0795e499be59ef4835b6b3fab8339f264cf37a1689af6bcf568db248 8742 glewlwyd_2.5.2-2+deb11u3_arm64-buildd.buildinfo 5f130c7a628ed996ead9429da3df21ab1fd199a3dc7b3e47fbe12020136dae7a 446216 glewlwyd_2.5.2-2+deb11u3_arm64.deb Files: 7d4600b9df9a13918537d204d1eff183 1030888 debug optional glewlwyd-dbgsym_2.5.2-2+deb11u3_arm64.deb 0d1d5d82f65867736e0521c70d44b7ef 8742 web optional glewlwyd_2.5.2-2+deb11u3_arm64-buildd.buildinfo 2a2215182ffcf41e71a70c0cca337430 446216 web optional glewlwyd_2.5.2-2+deb11u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEH43oX1cK+BEEs9Pe/9j0ct/+ZwwFAmaXDH0ACgkQ/9j0ct/+ ZwylGRAAn3gplpK/LH68kkmCdcjDk+AZOSDTPbtEuN/0Kft9p8ZzDdNFWWEjU5xV /Cy+o7xlMAgaoqV0mRtNeCdOwSYgnj03dDtco2AhZOeNdZ9KNy1uxODRa7BhETZZ PqfK/m2LXV99Ujl7ump72PR7ssBKm6Y+bw6pIwLvXkYr9gih/72rhIa1cEvJuyqS rN5JXfXBHQYJf3T8iu3gYkaLPnoohJQo/5pvHvCjSMAk+3WHa93S7Rt4b+uyaeWv Hc3FDiHFp4rX6cFNYNoLSjc0Q6vYJU1pGLy/BjmpKBOYatNblXK6jha5HAgY8WrW rEw0Hex/S0YR3+u4SDWqz+psxw8qygdkv0MDWcbNyOTnr2PeSEDSTzC2eeZszT8a wDuhjkCu7DjS7LQTai2QKhQXyeCPpvA5d9Da0dg4W7mK2RKlv3ym0n8Kltavzem6 lPircbZDNWgemxgZ/Em8QN9jlZ78iDNJcfeYs25Bo+t7Ry0Lnd+6rlvZ23wLLYgZ uPRMV2Np7XZFsizGERAbLyzD1ZpEGPSmgPpX3SMsK3Kf5wF5jok8tlSbe4qBvbI7 Aibwtr7/cvTKVLTcGVsrBVUAZYrdRUWgWWij2oMd0L78xOU3rqhket6YTjjiyzKN yuXWz0Z9TL8Iip9bqhJq4Cv7KL605dOpUyIPFqR1n2FuIGNAEHk= =Mvb/ -----END PGP SIGNATURE-----