-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 24 Nov 2023 08:15:30 -0500 Source: glewlwyd Binary: glewlwyd glewlwyd-dbgsym Architecture: mipsel Version: 2.5.2-2+deb11u3 Distribution: bullseye Urgency: medium Maintainer: mips64el Build Daemon (mipsel-osuosl-01) Changed-By: Nicolas Mora Description: glewlwyd - Single-Sign-On server with multiple factor authentication Changes: glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium . * d/patches: Fix CVE-2022-27240 possible buffer overflow during webauthn signature assertion * d/patches: Fix CVE-2022-29967 static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome instead of linking it * d/patches: Fix CVE-2023-49208: possible buffer overflow during FIDO2 signature validation in webauthn registration Checksums-Sha1: d663f98f05599103f6f40bf55c8e48f41e8fb1fc 995720 glewlwyd-dbgsym_2.5.2-2+deb11u3_mipsel.deb 13b8d5aa504e2478c926298920fb5eba1dd67c8a 8626 glewlwyd_2.5.2-2+deb11u3_mipsel-buildd.buildinfo a801cfa7dc2769e1ff9bbd6538ff4bcd9ce74665 414892 glewlwyd_2.5.2-2+deb11u3_mipsel.deb Checksums-Sha256: 79588cafc4b62884e34f29d867c86646067dfe6e3e7ae35cda15305f1848f7fc 995720 glewlwyd-dbgsym_2.5.2-2+deb11u3_mipsel.deb 345a42c727881d6fc64ac02810148fb726b53d4b9b66b6e08cca7696d8dc2ea4 8626 glewlwyd_2.5.2-2+deb11u3_mipsel-buildd.buildinfo c09ece5ef4238e9ebe3371a95de259d40e631b0d066cc0a5b9301ef0be3bd39b 414892 glewlwyd_2.5.2-2+deb11u3_mipsel.deb Files: a53ee1d8a95ccad975c959808a56e3ab 995720 debug optional glewlwyd-dbgsym_2.5.2-2+deb11u3_mipsel.deb 704a41dbec69fabe16e6724b6e92a702 8626 web optional glewlwyd_2.5.2-2+deb11u3_mipsel-buildd.buildinfo 42c78165db0b429917f734c53666610a 414892 web optional glewlwyd_2.5.2-2+deb11u3_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwOi7AjfMfAOkP0DckzO9iVHf454FAmaW8o4ACgkQkzO9iVHf 454cwA/9G/JXbcGcrPUdqVUl3dSFWiXrclsZeoOdp1TlaDA/4KIhD/xObBuakluP UckQo9zIfgIEZ171+O3GcTRMrmZp9nQbkVmKtkzxAS4hsrDNdMpSymLkre+32meK 8oWt4R8YklkvCLNM10IORv8LKobrWIB6vPlDvMe/7TEjJXPB01IIGYqP9c2QybAD Gfw3/mfX5Nfyd77xVeaWa7PVim3vkF70wcNzVSTw8ci3htHUg7dmkbSoOIlABcB1 3gE/Maa2jX/cky/NINZkmnabq/CbtvPnsMg3CvFEyKMU0u0CymPVQwvKl1jeY/GF xniJCUFMWCPIqaWhf1L59xPm807/A1ZqP0Pon3ZW+1lZ/BedB1p8OM7gLAWuqJ9Q dLULBuCk72r3YB4p80G2FK6MYQ0QlNXaZ6qneR/jb+sV2fanAZfq9yfU5+lJSRwc eIz54Cru+suHPQPP+DfnqqUblk98tw9hp2+XJTgH6QIlrhi7a0+gqUhc39Pd9eeg N088ddADLWf2qwf+RciJmuoi6glIHb5l/ban41IoWlUtdcjvd2DCGHxxciEb02Tm ckzACfP7Hcpz05WClpMuT4jmySBryOl3p+MSajHVNPyWHlMJQO5+dgQTD/kU4/Pe 9EF92uEja95B09cM82pZfcpAbRJREQWSNG8BRJYrwOG9MEq9mpg= =1gyD -----END PGP SIGNATURE-----