-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Nov 2023 08:15:30 -0500
Source: glewlwyd
Binary: glewlwyd glewlwyd-dbgsym
Architecture: armel
Version: 2.5.2-2+deb11u3
Distribution: bullseye
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Nicolas Mora <babelouest@debian.org>
Description:
 glewlwyd   - Single-Sign-On server with multiple factor authentication
Changes:
 glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium
 .
   * d/patches: Fix CVE-2022-27240
       possible buffer overflow during webauthn signature assertion
   * d/patches: Fix CVE-2022-29967
       static_compressed_inmemory_website_callback.c in Glewlwyd
       through 2.6.2 allows directory traversal
   * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome
     instead of linking it
   * d/patches: Fix CVE-2023-49208:
       possible buffer overflow during FIDO2 signature validation
       in webauthn registration
Checksums-Sha1:
 f8f3d209567761abe11baaf354c6c87dc855b874 968124 glewlwyd-dbgsym_2.5.2-2+deb11u3_armel.deb
 09b188a430739719b8b1db67c573fd74c1ab50d7 8668 glewlwyd_2.5.2-2+deb11u3_armel-buildd.buildinfo
 a078c4577f1b086747b19888e0f08f963906c0ff 441372 glewlwyd_2.5.2-2+deb11u3_armel.deb
Checksums-Sha256:
 cbc71f041b1ee27dbdb176b5d3a76aeb898eb758d04e66288b16bdd372854a65 968124 glewlwyd-dbgsym_2.5.2-2+deb11u3_armel.deb
 b3750e9aad0e47911d67bd08eeded82ee9c718f319ab1f468e632b37e5a9afce 8668 glewlwyd_2.5.2-2+deb11u3_armel-buildd.buildinfo
 9bdbd1b0c396ea7afceef413cae6ce50e10dc5b6e82476072699d07138e163cd 441372 glewlwyd_2.5.2-2+deb11u3_armel.deb
Files:
 452d42958a6d9f9b26552627b5da949f 968124 debug optional glewlwyd-dbgsym_2.5.2-2+deb11u3_armel.deb
 eaf261b06a20be8b1324a6cf7f3faf0d 8668 web optional glewlwyd_2.5.2-2+deb11u3_armel-buildd.buildinfo
 7a8c92a8b5551c2849d428ec5ccbc167 441372 web optional glewlwyd_2.5.2-2+deb11u3_armel.deb

-----BEGIN PGP SIGNATURE-----
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=goUk
-----END PGP SIGNATURE-----