Ubuntu 25.04: USN-7446-1 moderate: mod_auth_openidc sensitive data exposure

ubuntu

April 23, 2025

mod_auth_openidc could be made to expose sensitive information over the network.

Summary

mod_auth_openidc could be made to expose sensitive information over the

network.

Software Description:

- libapache2-mod-auth-openidc: OpenID Connect Relying Party implementation for Apache

Details:

It was discovered that mod_auth_openidc incorrectly handled certain

POST requests. An attacker could possibly use this issue to obtain

sensitive information.

Topics Covered

security advisory software update Ubuntu sensitive data network exposure mod_auth_openidc

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libapache2-mod-auth-openidc     2.4.16.10-1ubuntu1

Ubuntu 24.10
  libapache2-mod-auth-openidc     2.4.15.7-2ubuntu0.1

Ubuntu 24.04 LTS
  libapache2-mod-auth-openidc     2.4.15.1-1ubuntu0.1

Ubuntu 22.04 LTS
  libapache2-mod-auth-openidc     2.4.11-1ubuntu0.1

In general, a standard system update will make all the necessary changes.