-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Apr 2025 10:56:55 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: arm64 Version: 2.4.12.3-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache Closes: 1102413 Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high . * Fix CVE-2025-31492 "protected content leakage when using OIDCProviderAuthRequestMethod POST" Backported applicable portions from upstream fix in https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (Closes: #1102413) Checksums-Sha1: e9fa675f01a43ded960cab81164f4b95b09ce162 337720 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_arm64.deb 822ee48df7a42b7f70540083bfe21fd89f6f034e 8062 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_arm64-buildd.buildinfo d0747da05d87e99b932c27e6a8487ce03c3d37a5 174332 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_arm64.deb Checksums-Sha256: 42bfd2c74e283a43883efd51de25d6e132671aed6f6ac34f2afef2ca3d33cec0 337720 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_arm64.deb 3f7da7b928a5cdffcc096960c31565f08dccf4b7b4b049ce810102ab6624a4c2 8062 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_arm64-buildd.buildinfo 7101ec98068c6573f47a861aaa9fe3c94a6719baaf87f936a7938bd1d0447b7e 174332 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_arm64.deb Files: e7f5215c6181b10c1f5b307b9b01a8e8 337720 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_arm64.deb 57100c312f2a55aca74e9f457206ae80 8062 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_arm64-buildd.buildinfo 37f3af68029820207d3bf22044eafc8f 174332 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmf/xlgACgkQS/ZIXkV8 oLDkPRAAy+hlSC9NKMBmsV1yJb+/RMCzi2wTOJXzGez9Mi1gvG1JzQgLFJPj57qe sfKlVXQKDYtYDPJoGr0lzCLoi5fnRbaZiEB/pE6URTlA2TnUPcos8ySh9qFsQEQu i11VnYBGfx9wUOCFOT14MUNid1P4e0Ea80ZnhRRzZ+MCQJVVSV/gDIj+mxSpbXrX GBIymKCalcSfaSrVe/jTBjihQZ3alomBCtZuvbGoPPzY+6ydT3WqMAbO+hu6CN6p 8m7V7MZbbPhLuzy+nbiBgmTdSdufs1PGT7zIG35IpTT3OUTCR8RSA7HOHY3V8i23 yRoTkNQigL5jOr1MYlnkTn031n0biTrGiy21ZmwXLLvaWiw0rRLFy4Sw4qhuaFAy JVS2J+GP2VUeX2/icm2O+9eLsTELaCaxl1yIWyxpFpVDhxAj06uUgniA+3t0cCvG c+I9JIgQR3lusM0eXmj5OqDx57HDEE5NXhywYSWgxR4iIG7TDqWklXMkoHcfhXXg kcaozSktj47E8fmoXW3UbRzsRxAxPprwKx+oVjrV6XnuiOv6Tm7aazrKDP00RjZ1 l37QgKM5g9dcvn9ImXoeNEH3G2tL3Now5xJYSQJ8lIJb/FGSTllz3zn7eL+rXmr1 aBzMmX6JI6SzYWcz1BqV+64nGeMHvb1PlTY9hBXH7ZAdJQvJsUo= =7eSC -----END PGP SIGNATURE-----