[Git][security-tracker-team/security-tracker][master] Reserve DLA-4768-1 for libapache2-mod-auth-openidc

Daniel Leidert (@dleidert) dleidert at debian.org
Wed Sep 2 18:46:06 BST 2026



Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2065889a by Daniel Leidert at 2026-09-02T19:45:52+02:00
Reserve DLA-4768-1 for libapache2-mod-auth-openidc

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[02 Sep 2026] DLA-4768-1 libapache2-mod-auth-openidc - security update
+	{CVE-2026-54789}
+	[bookworm] - libapache2-mod-auth-openidc 2.4.12.3-2+deb12u5
 [02 Sep 2026] DLA-4767-1 keystone - security update
 	{CVE-2026-80182 CVE-2026-80183 CVE-2026-80184}
 	[bookworm] - keystone 2:22.0.2-0+deb12u4


=====================================
data/dla-needed.txt
=====================================
@@ -261,9 +261,6 @@ ldap-account-manager
   NOTE: 20260725: Also add for bookworm (8.3); CVE-2026-27894 PDF-export LFI,
   NOTE: 20260725: unvalidated pdf_structure/pdf_font identical to bullseye. (utkarsh/front-desk)
 --
-libapache2-mod-auth-openidc (dleidert)
-  NOTE: 20260830: Added by Front-Desk (dleidert)
---
 libass (dleidert)
   NOTE: 20260712: Added by Front-Desk (utkarsh)
   NOTE: 20260712: TEMP-0000000-AA08BC (GHSA-pjjp-65r7-ppgm): OOB read+write in wrap_lines_measure from untrusted subtitles; secteam fixed stable via point release. Affected in bullseye (0.15.0) and bookworm (0.17.1). (utkarsh/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2065889aba78d6c4d22ad4262bdc3e41f91cd3d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2065889aba78d6c4d22ad4262bdc3e41f91cd3d9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260902/4250a065/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list