-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Apr 2025 10:56:55 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: armhf Version: 2.4.12.3-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-06) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache Closes: 1102413 Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high . * Fix CVE-2025-31492 "protected content leakage when using OIDCProviderAuthRequestMethod POST" Backported applicable portions from upstream fix in https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (Closes: #1102413) Checksums-Sha1: 4710f8f2869bd2481be079b5836d495cf51a6f80 330700 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_armhf.deb 8f6064b8146238f9bd4f75954a575bc212ff00bb 7938 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_armhf-buildd.buildinfo f805925d37f87279da4aeb7eb4fae2464ba66f54 178720 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_armhf.deb Checksums-Sha256: 3c040f7ac8c65003e90a57074b51b4c14570b70b1e7b9ef858db09c62dec1db9 330700 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_armhf.deb 3718182708e51cd9fe705a6b9ce6b1681cf4000a21038e3b6b0f56d9b7a4b17a 7938 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_armhf-buildd.buildinfo bbe8af5aa662255f0727da4f7795cdba9682cd618e796f1af1a871e4cde3b13f 178720 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_armhf.deb Files: 5403cc5061c4c4eb66fd0250087351fa 330700 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_armhf.deb b922ef3d213c2fcdcd37e2fd68b890d3 7938 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_armhf-buildd.buildinfo a120737b3ef8b50df641c20a754ef932 178720 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErcTbumGV7Ig2iXlfQdxRZ9J7nEgFAmf/xcUACgkQQdxRZ9J7 nEgvGRAAvB/A0iNjK0aVl+LvwoC8WqFuYz5oY8+PBMD+YnMZyiZBsI0W3RIyFWDN PkXF6bKllfhP6CI1/w5IEixNiWvN6dvQMYnNmd59MUw/hw8RmhimAiHyEP5r4PZB LS7uXbOCEwB0Q4aQ7SsX9kQ2PXNec6aRiT0AEZlNB+AOd5IyLX415++r7YQ3+6Re NjHr1oPQSytBOhrHW/Yg2HR8G1G6A9sBK9J//LPNPh0mu1Gvrmg6xY6BQ7NZKBvA QmNN5Yw7Jp+3YvvAV7Ww6J217wm6aYZPDsa0KdDKwYRln2LbqZfUTA3SEmfIYdbC SGL6GTeqw9sQYh/x0kAhdz1cAWlUEcoGpLkKZhddx8u3mM9mJA+8EeMSEi6/OS+j n+6nk6ZlGcFaiOJkREDjPt5EX+6iSy+yZVGscAB2UTB3JwjG+7pgEkpOut43nL5e 8MiznF/EMXVNQE64JT1XqYLtT+WqNLlfYamggMiZCw8ncUe1/jVHvg65kwWMSSFm ulQpdGJp4+7qT3blF63l5tI/ZcCm/xhVNBAFhQZaI8kX4y0N0/Zf4cUJu/MHPOWh m54wM2hBDBudvgLcxDNAJ2ggZq3yGdkhknzJiP2VMyKiieLpt1rweFpun+WctQW9 Bb1h4ekaydbHNMAjtugYfBA6E8Z5wAB4uD6qcylTPJ0HJdpREgo= =fGy/ -----END PGP SIGNATURE-----