-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Apr 2025 10:56:55 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: mips64el Version: 2.4.12.3-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache Closes: 1102413 Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high . * Fix CVE-2025-31492 "protected content leakage when using OIDCProviderAuthRequestMethod POST" Backported applicable portions from upstream fix in https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (Closes: #1102413) Checksums-Sha1: af3f73975a779bbffc2eb4b203c4b46a9fddab63 355648 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_mips64el.deb e1b65169d3a2e4a7b2acef0a960605bc643d9029 7915 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mips64el-buildd.buildinfo ecd8c5666b2fe50895ba0da11e511ea6ae715f56 161248 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mips64el.deb Checksums-Sha256: 10331656fa31b7d86d9f5e2b93e01460bda6cc24941e6e8577aa0a245373cca9 355648 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_mips64el.deb 06f96ec087d84c5d51c4d9eab18c00d3703a8735c4d31fbb67f448542658ab77 7915 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mips64el-buildd.buildinfo 8abd408ad65d56184bb31f13f84b66bd53c83cc3975170605af9e2d27c3b1642 161248 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mips64el.deb Files: c2b5b1e7ee3e3a5921727d21fe8ba484 355648 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_mips64el.deb 940819d0dc81dd3a171a25f95176154b 7915 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mips64el-buildd.buildinfo 6224ddc6f58d92792cfe109b5aa4daf6 161248 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmf/z48ACgkQV4aVsMgl zVdY4w//QpDAegtWKj9j5B6go5yXQCIRnNChdrRxihCk9Ev/bN7r2fbAwaq6+Zv7 xNHtVV7+UVg63JcWe5KHvBhvLt3MJxP2dDqyFU6kzF1en5EgzlxZ9hf1gEKjoMAd BX5t7IwoBdJqoCITyzeZm3puebbH8OlpZofhANYVy3yEo71b6zGYzVL6q00DAx1P wDYyL/eEqTGilbPRxKV5fYMfSjkrEtZN3Gca47iVSMgbsSniT80zoeFrMlW0YabC fprcKlSQ3A45Eyoa3QpeZGmGkOYZFvStW3bqbw5xBAdmBr5dKWyojUZGv2e1EjHf KYrfXRsnlpI1Bi7wMvslbi5/jV7TSY5rOyUYnajFxtqN/Jy4zd8EXYH3dmH9LXjI llemmpmFVkTxm2mnYF22P5aXbxt7J+qsk9HAtaeHDGGF9WNuaKOE4YReX5rBGnGe pGkcvg+nSmdJz6z8cWzUW8KhaX0tC68ZPY5o7UnipiHQwpiRsTnSoSEP1ekUglmX 0fGJDcwC01amxS2DehcifEGaJRZ30K3aj5QLVJrd6euAH2D3CNBztJ9rbqjLzmX0 uSW9cPLbjm1PWN2sUNPonffd04YZUiLGzMQ0U+uVg99Jkib33WLyBE2msC6gxkm1 DzYQyyEd/0YvJsleFX6Nv3KCyPdbKpxkRYyOs7W9NJN2XTwYRZU= =cl/3 -----END PGP SIGNATURE-----