-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Apr 2025 10:56:55 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: ppc64el Version: 2.4.12.3-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache Closes: 1102413 Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high . * Fix CVE-2025-31492 "protected content leakage when using OIDCProviderAuthRequestMethod POST" Backported applicable portions from upstream fix in https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (Closes: #1102413) Checksums-Sha1: a0a29fcbaa6d9057291c64dfd5cd5ad9fad43f1e 349212 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_ppc64el.deb 5a7aed615760caeafa58936dbb2a96e48abfb777 8075 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_ppc64el-buildd.buildinfo 33f9b0f88658889f12021398678aa9cbaf126ce9 190736 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_ppc64el.deb Checksums-Sha256: 0dba825d3ea102ae1bf6df410df897168c4811569ef07d7cab837516be6bc739 349212 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_ppc64el.deb 8e0dce4d634f408791c76f6fe24fe30a433602adf688066563e05eedacacb7db 8075 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_ppc64el-buildd.buildinfo 860ff5d2fce24d3897fb4237048dc36fef3b1ab0d92a0ff36ac3333c5ba00340 190736 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_ppc64el.deb Files: 8ae1819028c4abd123c417746001e93c 349212 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_ppc64el.deb 618773f7c603a25b38fc1a9c718352f8 8075 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_ppc64el-buildd.buildinfo b130878f61efc8e3edef522475352060 190736 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0YcVZfZCWQv84jpRNcqbeolus3sFAmf/xXQACgkQNcqbeolu s3st9A//SF2J7+FSnLcxMSxdXP1FjAtL/VmodJO0cqEtkvg5wOiDLP4pitTy/PRH OG3Qez9R6L3YiLCINUEP2x00egES09PXbiDsMMguXrr9pxrBGszPXzGBurO5pvSG dVuQBcuot/yYgZ8NsvoRSDOSMKhQ8yhg0UkOCMwXJZaiDyyMgfOyrLOqCt4Kv5oK T7PkDfXmWvyV3dhQ2DEHUqgMRL0BUUd0ixGaLGceAIQbu+Fe8fnwxtxSyJr07t43 JP9cQYAjIHdEFbXNXa2+t03Q2GC8m0Xx9vo5XYmpjH+ZgrRKE9z/QjFy4oGnNszl Yu/rj2Z4ivHWS5iW61E81ht6942IGNdKsEnrzIbSpdGuDhowL6zMayEATNBuRPh3 PuONbmPWTpIvPZ7jSjGxgNrnlEpDEkWlXUSTRE8OodF+LmeWQ8IA3pgoGl5PtrXs gFoBO/WG7aSbafJOlRJCvfhqme6H326g7R3S+kBPK9tRjtWfxfB01LtDQU5WN1sl xsX/qIvxGWYC+dSRw1N41nDHW+/NM19RL563bQxC4VUvTue2+2PBoRaon6ohkNQN R0n3w8y0/loVkDu0uAoS8yj2bhe4YA1DNE9W4t4gL2URUewIN0PtVzXDyd1meRSO VdH2U4Xxu3ct98kauOAeIwQgBfTYJdbkN9SaK7xDYXhanlwkQ3Q= =st29 -----END PGP SIGNATURE-----