Hi,
yes, I was waiting for DSA to be released. I just pushed the DLA
Best regards,
Xavier
Le 12/08/2026 à 20:22, Santiago Ruano Rincón a écrit :
Hello, Xavier
And thanks for preparing the lemonldap-ng updates for both bookworm and
bullseye. Unless I'm wrong, I don't see any DLA yet. Are you planning
to send it, or do you want some help to handle the paperwork?
El 11/08/26 a las 10:20, Debian FTP Masters escribió:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 11 Aug 2026 11:01:31 +0200
Source: lemonldap-ng
Binary: lemonldap-ng lemonldap-ng-doc lemonldap-ng-fastcgi-server
lemonldap-ng-handler lemonldap-ng-uwsgi-app liblemonldap-ng-common-perl
liblemonldap-ng-handler-perl liblemonldap-ng-manager-perl
liblemonldap-ng-portal-perl liblemonldap-ng-ssoaas-apache-client-perl
Architecture: source all
Version: 2.16.1+ds-deb12u9
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: Xavier Guimard <[email protected]>
Description:
lemonldap-ng - OpenID-Connect, CAS and SAML compatible Web-SSO system
lemonldap-ng-doc - Lemonldap::NG Web-SSO system documentation
lemonldap-ng-fastcgi-server - Lemonldap::NG FastCGI server
lemonldap-ng-handler - Lemonldap::NG handler part
lemonldap-ng-uwsgi-app - Lemonldap::NG uWSGI server
liblemonldap-ng-common-perl - Lemonldap::NG common files
liblemonldap-ng-handler-perl - Lemonldap::NG handler common libraries
liblemonldap-ng-manager-perl - Lemonldap::NG manager part
liblemonldap-ng-portal-perl - Lemonldap::NG authentication portal part
liblemonldap-ng-ssoaas-apache-client-perl - Lemonldap::NG SSOaaS client for
Apache
Changes:
lemonldap-ng (2.16.1+ds-deb12u9) bookworm-security; urgency=medium
.
* Improve CDC filtering (Closes: CVE-2026-12804)
* Use OTP to store GitHub/LinkedIn states (Closes: CVE-2026-19349)
[snip]
Cheers,
-- Santiago
