-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Nov 2023 08:15:30 -0500
Source: glewlwyd
Binary: glewlwyd glewlwyd-dbgsym
Architecture: ppc64el
Version: 2.5.2-2+deb11u3
Distribution: bullseye
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Nicolas Mora <babelouest@debian.org>
Description:
 glewlwyd   - Single-Sign-On server with multiple factor authentication
Changes:
 glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium
 .
   * d/patches: Fix CVE-2022-27240
       possible buffer overflow during webauthn signature assertion
   * d/patches: Fix CVE-2022-29967
       static_compressed_inmemory_website_callback.c in Glewlwyd
       through 2.6.2 allows directory traversal
   * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome
     instead of linking it
   * d/patches: Fix CVE-2023-49208:
       possible buffer overflow during FIDO2 signature validation
       in webauthn registration
Checksums-Sha1:
 04089e4e1216efcbb96be01d5e8c77cbc9d8208b 1053236 glewlwyd-dbgsym_2.5.2-2+deb11u3_ppc64el.deb
 f1d50e55e12f1be63386a1ab15b29fb809e4fb0f 8790 glewlwyd_2.5.2-2+deb11u3_ppc64el-buildd.buildinfo
 47fed4e58a85e4c7d35efb930348b9901547952c 475340 glewlwyd_2.5.2-2+deb11u3_ppc64el.deb
Checksums-Sha256:
 a6de218d4f1b8e8c3b7c7c70322624cc4a0b4a5eab28ed273422403f0da4bc83 1053236 glewlwyd-dbgsym_2.5.2-2+deb11u3_ppc64el.deb
 fac20f3f09d73c15da9b63c0e0cadec63f555f420f95d77adaf7859f73f2c049 8790 glewlwyd_2.5.2-2+deb11u3_ppc64el-buildd.buildinfo
 83b1f1fd137a16eac71f484d10a0b518db32f207c74e247746a319c0dec3456a 475340 glewlwyd_2.5.2-2+deb11u3_ppc64el.deb
Files:
 69f02acaa9d2e2e8e390170c7a9f4b4f 1053236 debug optional glewlwyd-dbgsym_2.5.2-2+deb11u3_ppc64el.deb
 62ca01dd763c6ba0e9140c3ea35b8371 8790 web optional glewlwyd_2.5.2-2+deb11u3_ppc64el-buildd.buildinfo
 e97a0650d3001bf822648dc9163b1b76 475340 web optional glewlwyd_2.5.2-2+deb11u3_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=KN3K
-----END PGP SIGNATURE-----