-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 24 Nov 2023 08:15:30 -0500 Source: glewlwyd Binary: glewlwyd glewlwyd-dbgsym Architecture: armhf Version: 2.5.2-2+deb11u3 Distribution: bullseye Urgency: medium Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Nicolas Mora Description: glewlwyd - Single-Sign-On server with multiple factor authentication Changes: glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium . * d/patches: Fix CVE-2022-27240 possible buffer overflow during webauthn signature assertion * d/patches: Fix CVE-2022-29967 static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome instead of linking it * d/patches: Fix CVE-2023-49208: possible buffer overflow during FIDO2 signature validation in webauthn registration Checksums-Sha1: f42f0528689164f8b8e127e9a17989329300df11 979200 glewlwyd-dbgsym_2.5.2-2+deb11u3_armhf.deb c6fda6fda882aa87478272b75bf6431e429c048f 8670 glewlwyd_2.5.2-2+deb11u3_armhf-buildd.buildinfo 5688e8dc5d92b0206770f47868b06050c748e025 458156 glewlwyd_2.5.2-2+deb11u3_armhf.deb Checksums-Sha256: d6a8077246687b30ce82655e155fd10ce648bc37a8c5f2bce9ff04d1e57f2a1d 979200 glewlwyd-dbgsym_2.5.2-2+deb11u3_armhf.deb 53cc6ea7b89b240c33c50c975aef40ddc2be64984a1c8f8f793db36441bf4bb4 8670 glewlwyd_2.5.2-2+deb11u3_armhf-buildd.buildinfo 1bfc27df549e21851094f96868108940b1eb29045379d5232ef9327ef5b00f4a 458156 glewlwyd_2.5.2-2+deb11u3_armhf.deb Files: 8070415096045b5281dad352d8f7e5ca 979200 debug optional glewlwyd-dbgsym_2.5.2-2+deb11u3_armhf.deb 4c48f9d719483f3ed13b7d19e777ee73 8670 web optional glewlwyd_2.5.2-2+deb11u3_armhf-buildd.buildinfo f166e041b18a08aabf000ad08de4bf5e 458156 web optional glewlwyd_2.5.2-2+deb11u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbvtGd+QaAE2Bi5fsFgOvjtRcdMFAmaXC7AACgkQsFgOvjtR cdMIkg/9FADPKtTEB3jOhlc+p/2QBgjXhIyd3I0S5L2zPy4irgX59XXgKWaLxkjr Eh6tdN6Apg4OwFqonAvriLgxuL2qEzhR4sbV7ZcF0bBodWt6GzUc00dmKa1rIAIk oSJLFMJ8HyjRqA17YdIpF32n5P6zysQRebEzVzJW5Ojeo9SGnJrPDaMRqBe/E8u0 Ho3IgMunEDTkGk140k3m9fs9Rbl+bTpAXMl4Xi8HmmkzpB151jieREKdUFTBm+HV 1yB2ihHllro8w7No6D1NqfTu/Zsu7H4qvlJjkHtyrphtED6Q+R74peqytnpE+IMX HQhQfImldk9pjwtUNHCO/OIWPJ5AREry7hoq1/AjGxnLmTJ30xiXwT3tjMSjCOJy ejw3NKKpsTTvK/kUhoBd+qTq2/YMRS0afWSudWe+xx4RScupvJaePUExUlLZJqs9 Sk7FgLuOWaTRSQiBaZx95JCwlCAa1JG70RuQZsniCUBmeJekpzlrdMfzLWpp0C+u oLXRyJglKf2gNieBPgaPxb+f1MXdWoNHWYwZ3ZO5d00iFWHCLDeBmVg5YZ6zWX6K GC9xZv25kRmmqCz5L1dmKfr3NPNuPVYPwEmdRVcXtXRfyMNdbatDve3lchSuvbb7 0JikZ+2AtFi98qEqG7vdfE1/R8wa6epyaM2puPYanpieACmQgE8= =pyRa -----END PGP SIGNATURE-----