-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Apr 2025 10:56:55 +0200
Source: libapache2-mod-auth-openidc
Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym
Architecture: i386
Version: 2.4.12.3-2+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Moritz Schlarb <moschlar@debian.org>
Description:
 libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache
Closes: 1102413
Changes:
 libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high
 .
   * Fix CVE-2025-31492
     "protected content leakage when using OIDCProviderAuthRequestMethod POST"
     Backported applicable portions from upstream fix in
     https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127
     (Closes: #1102413)
Checksums-Sha1:
 579e2ca7736d51001c1aa9bc2b1da3c7b66fb2e8 260904 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_i386.deb
 accea5127c07c009f46acebba5e493ccbe3caba9 8003 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_i386-buildd.buildinfo
 0c2237f6ca4305e91d235d76a2efdad841f1b15a 194464 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_i386.deb
Checksums-Sha256:
 a0f737eb8e5c4a336a359abf3bd499dea09b0a97c88c7897b698b84fe59645ef 260904 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_i386.deb
 ab73fe1b198b15913074658f37d9b7d0d6243fc4aa13f8fbd4e7c50d490505dd 8003 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_i386-buildd.buildinfo
 27c2b9d7e49b9b12b14fff625dc562f496a212509de84b7ecf5ef140ee871af8 194464 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_i386.deb
Files:
 763577889cb44045d413d7a8f9b0fbc3 260904 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_i386.deb
 668e8565608dc49864b8f504403b4ae0 8003 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_i386-buildd.buildinfo
 2ae087965d692e69fb426742e4d9e2e0 194464 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_i386.deb

-----BEGIN PGP SIGNATURE-----
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=eoJr
-----END PGP SIGNATURE-----