-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Nov 2023 08:15:30 -0500
Source: glewlwyd
Binary: glewlwyd-common
Architecture: all
Version: 2.5.2-2+deb11u3
Distribution: bullseye
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Nicolas Mora <babelouest@debian.org>
Description:
 glewlwyd-common - Single-Sign-On server with multiple factor authentication - commo
Changes:
 glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium
 .
   * d/patches: Fix CVE-2022-27240
       possible buffer overflow during webauthn signature assertion
   * d/patches: Fix CVE-2022-29967
       static_compressed_inmemory_website_callback.c in Glewlwyd
       through 2.6.2 allows directory traversal
   * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome
     instead of linking it
   * d/patches: Fix CVE-2023-49208:
       possible buffer overflow during FIDO2 signature validation
       in webauthn registration
Checksums-Sha1:
 89e0e4b6f58b956a13bbea60551c6edb55e0e7a2 968576 glewlwyd-common_2.5.2-2+deb11u3_all.deb
 797736c779423a349550ef546d3d1fc79db52339 18777 glewlwyd_2.5.2-2+deb11u3_all-buildd.buildinfo
Checksums-Sha256:
 d29ce15e8f07563a1afb284c13c25acc9eec506570c80c3cfcfd7f16fb614656 968576 glewlwyd-common_2.5.2-2+deb11u3_all.deb
 63c5d0bdeb13ac75189c4add931fc47180fac2e9a005cd31de7f11527f20ba92 18777 glewlwyd_2.5.2-2+deb11u3_all-buildd.buildinfo
Files:
 9cd8cff0cb87104dd036208121b3fe95 968576 web optional glewlwyd-common_2.5.2-2+deb11u3_all.deb
 20d36050d886bce7f1b639530cb61f87 18777 web optional glewlwyd_2.5.2-2+deb11u3_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=e/4u
-----END PGP SIGNATURE-----