-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Apr 2025 10:56:55 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: mipsel Version: 2.4.12.3-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache Closes: 1102413 Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high . * Fix CVE-2025-31492 "protected content leakage when using OIDCProviderAuthRequestMethod POST" Backported applicable portions from upstream fix in https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (Closes: #1102413) Checksums-Sha1: 7474180b944b9d6e15371a9a3b95f6b9ac191912 346144 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_mipsel.deb 72f6b9f5a756501b8f9ba9dcd967209ae17e2d85 7892 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mipsel-buildd.buildinfo deb1f2a366866f039577f952bbd47fade73b63a7 163884 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mipsel.deb Checksums-Sha256: 1ef924bc1ce114e648b20f0c5f35528034d3f2af0708c46109eaddf374dd3d8c 346144 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_mipsel.deb 9ad8c43f9c8997ea199ba3ad004fef456e836535379823e8f707f634b384f4ba 7892 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mipsel-buildd.buildinfo b33e656eafd1b8486113d2205e40f1cb8627e326bd680df0f4d673145909c357 163884 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mipsel.deb Files: 695efab885480374c010fdc6ab11aea6 346144 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_mipsel.deb 926999cb1cc599668bbd9c2141c1d9b9 7892 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mipsel-buildd.buildinfo 4ee66e3c4ba42363e0ec7db1873fdbc9 163884 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmf/zwEACgkQV4aVsMgl zVf4ShAAm5eHHQ5c4ArGGUaFN4JpdSf+YVvmw87qNTt9u+lRNa8hFYsnGGEzeq1Z 2kszLlPcyrMlhxYguVb+S5H/HjgJ1BX+PzhHuXQTS/Uhgm+GsiItH7J5oyLJ7619 TtRWTH0GYMopx0AvDW855Q0wnRgSbozYlAbBgt+c/KGFcoXUfjl5SQyjLsQt3tnk PbUNwtbVmbMs0or4Dn74lsRY7uQ5H9fsULBRSBVvzWTq7ynmtkaSsKg9SP/Pv206 Mhx2W7qdFNoB2EuZhYN49RT2ewVFAnjADBq+69fYdVBTc/8rbdvxz+oX89ZqVEGo tapvRLDcW6MPYWFjoioa1jq43VdhHxRm1PvfolQ5f7DFK1kLBFNZcKzX11l/dPba L9cc4h1mG7uy9iJpwDeS5acCoinHemChDAHikUIPZXfAhEjpiE/9KUppSgmpfZyP 7/iiPK+xjS5uxT6osr5Dj130p89dcZgl/hKsLbP1sPFS5h5xz85bWs7EfPaBw+eI OZtkP5hH10OXrIOMrjnd3ANN1V4uWIqLW09p6t/6MyXtNrKnabRUJKs69um8hHpQ K0mkYfxqT7WvKXqrwGACbSOwQH+zxAfYExazxkEllPKiPnkdEN2TKSirvmxpLAob NZcJh1Ki8T3ozx2ZXMyloV9qBgXVl7f96niMWHh5AhKUWaoLka0= =HVVg -----END PGP SIGNATURE-----