[SECURITY] Fedora EPEL 8 Update: lemonldap-ng-2.20.2-1.el8

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2025-eb0d031bce
2025-01-31 01:16:48.532617+00:00
--------------------------------------------------------------------------------

Name        : lemonldap-ng
Product     : Fedora EPEL 8
Version     : 2.20.2
Release     : 1.el8
URL         : https://lemonldap-ng.org
Summary     : Web Single Sign On (SSO) and Access Management
Description :
LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It
simplifies the build of a protected area with a few changes in the
application. It manages both authentication and authorization and provides
headers for accounting.
So you can have a full AAA protection for your web space as described below.

--------------------------------------------------------------------------------
Update Information:

[Security][CVE-2024-52948] CSRF on 2FA registration
[Security] Open redirect vulnerability in logout
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 21 2025 Clement Oudot  - 2.20.2-1
- Update to 2.20.2
* Fri Jan 17 2025 Fedora Release Engineering  - 2.20.1-1.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2339165 - lemonldap-ng-2.20.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2339165
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update lemonldap-ng' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C
/html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------