apache2-mod_auth_openidc-2.3.8-lp151.2.6.1<>,5ԉ^p瓸/=„V_|Oң, !bcD;г0έ%oA]A2.UVjmIG08>@?0d! - n + Dh       T\K(r8|9::FGHIXY \0]8^Tbtcdefluvwxy z,Capache2-mod_auth_openidc2.3.8lp151.2.6.1Apache2.x module for an OpenID Connect enabled Identity ProviderThis module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.^pobs-power9-06openSUSE Leap 15.1openSUSEApache-2.0http://bugs.opensuse.orgProductivity/Networking/Web/Servershttps://github.com/zmartzone/mod_auth_openidc/linuxppc64leA^p^pedb29145e880ab903607b4a0b6e106e013f7c68e0e37bfdd4bb8493ea8990bf6rootrootrootrootapache2-mod_auth_openidc-2.3.8-lp151.2.6.1.src.rpmapache2-mod_auth_openidcapache2-mod_auth_openidc(ppc-64)@@@@@@@@@    apache_mmn_20120211libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcjose.so.0()(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcurl.so.4()(64bit)libhiredis.so.0.13()(64bit)libjansson.so.4()(64bit)libpcre.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse_maintenance_mmn_03.0.4-14.6.0-14.0-15.2-14.14.1^_@]{@[v[GZZ1@Kristyna Streitova Kristyna Streitova kstreitova@suse.comkstreitova@suse.comvcizek@suse.comchristof.hanke@mpcdf.mpg.de- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix open redirect issue that exists in URLs with a slash and backslash at the beginning [bsc#1164459], [CVE-2019-20479]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix open redirect issue that exists in URLs with trailing slashes [bsc#1153666], [CVE-2019-14857]- submission to SLE15SP1 because of fate#324447 - build with hiredis only for openSUSE where hiredis is available - add a version for jansson BuildRequires- update to 2.3.8 - changes in 2.3.8 * fix return result FALSE when JWT payload parsing fails * add LGTM code quality badges * fix 3 LGTM alerts * improve auto-detection of XMLHttpRequests via Accept header * initialize test_proto_authorization_request properly * add sanity check on provider->auth_request_method * allow usage with LibreSSL * don't return content with 503 since it will turn the HTTP status code into a 200 * add option to set an upper limit to the number of concurrent state cookies via OIDCStateMaxNumberOfCookies * make the default maximum number of parallel state cookies 7 instead of unlimited * fix using access token as endpoint auth method in introspection calls * fix reading access_token form POST parameters when combined with `AuthType auth-openidc` - changes in 2.3.7 * abort when string length for remote user name substitution is larger than 255 characters * fix Redis concurrency issue when used with multiple vhosts * add support for authorization server metadata with OIDCOAuthServerMetadataURL as in RFC 8414 * refactor session object creation * clear session cookie and contents if cache corruption is detected * use apr_pstrdup when setting r->user * reserve 255 characters in remote username substition instead of 50 - changes in 2.3.6 * add check to detect session cache corruption for server-based caches and cached static metadata * avoid using pipelining for Redis * send Basic header in OAuth www-authenticate response if that's the only accepted method; thanks @puiterwijk * refactor Redis cache backend to solve issues on AUTH errors: a) memory leak and b) redisGetReply lagging behind * adjust copyright year/org * fix buffer overflow in shm cache key set strcpy * turn missing session_state from warning into a debug statement * fix missing "return" on error return from the OP * explicitly set encryption kid so we're compatible with cjose >= 0.6.0 - changes in 2.3.5 * fix encoding of preserved POST data * avoid buffer overflow in shm cache key construction * compile with with Libressl- update to 2.3.4 - requested in fate#323817- initial packagingobs-power9-06 15844576192.3.8-lp151.2.6.12.3.8-lp151.2.6.1apache2mod_auth_openidc.so/usr/lib64//usr/lib64/apache2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12125/openSUSE_Leap_15.1_Update_ports/b47f787fdae79a7460ac948bf717ed52-apache2-mod_auth_openidc.openSUSE_Leap_15.1_Updatedrpmxz5ppc64le-suse-linuxdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=96326abff3dd6400426f3208eabdcdd0314ba80d, stripped RRRRRRR RR?з" 1E]utf-8e40a8745ab9c9e6aa4953accfbb733e26f985f00823878e00e2c9a081662e80e? 7zXZ !t/;I]"k%"5okw@_/.PS8;oͩz.> '/J"'oM +|+ɸfE`:Y%g:2y UglgXy.,Θm&oĞҽ]'J_=E#cżWC4d_Ih/սv]ٝ}qo )[|ѥؓ[ˆ|y {NL6D 6&vqgz[NC8[Ϳ*`3TC!sQ(#en z~ KaM xgC#k/VhcG`-˂H*lTQOWAembp#&72@/P(mk/Xl1dpSd4<g#ݗIYOgʊ5{<'}0JMwlG<#5#L֜)Pz-;xh@s䎧WҔ;|Bs`\69Oh;6-s MVjfdhc5`Lg=юgK'8ux=dD*&) F]ˡtAwj D+Tӊl1>=fibn_u8$â,;r= R:쏦#EWG x$5}ud1ͅ)\ﺋ301*sHtNEEͻ~;`@)^TXz@<,.Z|ߕ)=XoK!Pm ,."[Dxq(J &emW)tDl?MR;Uk\{_/!uiWAd\mS.iUWEģ5P\L"F+Au9%Cʇ]mc|AɥmnMŷ0o="F)e:Y' eӁ-@Ƕ=[7 +pukoyoOA.㷎d^@~^JZP)aݧU CXg]`:{mb)9 NF%2zDžċ) YT-'*'l受0eVC962ߋŲkܥ. F/d C5#k=n^e ]sȂ}z1AY5T OiWoBP(sCNڵߦEt,ROEPV XBEs%H;ϯOXBjM% <`o4 sX$rx/m9j ^ 4\'Z]o@[6U2|Ev0,W!B\a%T? s- I StHw.y} +H- mK<\ln6pgw~[r{\yCU`db懋$hҪý.yZDT{fpMU ׭9c ոQ'g| ,__z,A9F7;rn;f;Qv+vc}Ƕ_[R]\a*Ad&̖vf/FDڦ,/aa(IT5Դj_ -.Z1!Qj碷ӿ(|m CM7xq9 JlJ1f* ZMy6)S!ʓmuJ7{ڱȻwZ璆Ovqlc2q&m[8(/N\\d/DW0L@ݗ8QXU+o8͍ѣ@Roofs+Gie/ ↛2EAfJ_Eo怲EIgRY:" 섴ڨ9aZVS#!qKe{cJ.3Qj>=|hne5?/Q0wNP5)-NgԢCN<^_if%d^sQ Am0SFAn ؘL1r=@J 6&E+Isdʐv d.Bƥ!5Y?hS+Bm۟Őq)`!=`f )fO꼒t /ۯ0W$A~2Clɵ>鶁Nh:༾0Cؤp!S3$8HiMf799/n <⧦Y>,CQ搁O8;[L.7hp/12,h?kǟo%0t=WU&Bl/ooLܲS{O"Mw3F {hPhz 3 h@uA+ꮯPWc"~==N6lC(b0Lgl0 7ݩCazD|Xyz``XmŎ {& 3kY0"D\^2^B/|@nZR}RD`c.ѤB,QJ uɹɈ]T}` 1cKQZðCs)nGspDa{ 9vrq⁓ӨτOkE#ovVpZ"Yxw{S5bev -·~`lT| >72wHKbTSiKgTPtZp8.d}D-K%X`'$l[㆟T K4ǴGQc?[?l*!tX<(RPURE07Zv 23%i:dz{L n0Hw+&MGY$& .TFd7"oZ^j{w`16~4k:Ddu *'kC/O'V5[x"xc42I|N5jgG,T\劙Xaӊ8s\b!U^p=+R\nb1FkS{0`7B*<j|ҪR 24Mݦcc]/ۊy|Xi.<$%5tMF z#\0O`l QY)`tVe<Ƚ' \]hZ.1Dm=S}&~%[\zM.2ɫb\2)$J)`KlcycrsG'|^#BMe=R:|N=yjXmri}i1@n&#,ؽ{YijIuLҎ&d+Z3*D>xB_DInm~wk:o^4аb|ERÂ8X@nBj':~̿7mJTz-?99ɘV2IE3=?xѧk&G=!]&lrmU^Q bZ;V /&}R V x-#/o=X\Ox8S>fn(]8a]-n޳D1HBRMj W"kCW]^sZwi3PlD,@Z4+DO^:t*כI;&N~"g9O_)P @󎨧Z9: ~[7qIXL|@K}cQ G*ҙyH襮4G_0z'z_QuR6?rZHFmm]UZWlgH#]p6ZO=2TH|@#AD)d6% %'wT$v$lFi(cgM{nE2'u^Ae|1 $-ZK4~NHDz9 ʃN>Zr"Et2wCgvN- z5OW"MH,hkOY*S:R]%{`~^ *l3ػ̓(X"Vxw(=(rE(eSC3iWJ?%&XgOWWJ w..C¼0_PLC@I X_gyUCyruvGUj5,Gm U=IO!J#&~*1r4+,.צlb%rFM9i PN/Ϳ!vQ 3 ٸCƉWe[r󘲢7}=&|W9d=ns>ѼsAR:ڄde0fcб;Ɛcmz:I(DHb,8c>y l7ty2v8uc^O-v˺<T^I{lV Z*7lA^³< [E4\$gRҲ@v>1Dz8*]&=ߋٸ_6 ϸ{ωurw{rh'n35#W΍)]6`$:e6;.Lc@Ԥ]Y$% rHD\;fݙs<RƠ/&Kbԋ ˿Pdz1{D& qW1%E x~ԐB)r|j&", v31R}| NF$iPgIAcݏ~%JQIV͙ PF"45ߠD\zz2b뤃C}v -^GpM1P#U7 ^*7#aQS29 qMrsتJz>4"`enfBo7xoSt5&:폏j@?uPh t^?۹+w("fZe*=_Q_Ǎ̭!=ҫZG,J4x*VY롍M:ƙǪJzo7,m7F2;A{!\!K )|ݏ "$56D%ڙaK~2m*ek4:)[j]Zr"ajzxؼn j&`kTCϲ]>5*k[oJ<5zv")sQjS4^ ;hASŞ6 \J_Mi:&O[5R{ }5Ku^OIN) ,YaWFp>#-B&r3sřKh(^jF>#J&u(\7oTQxaXdwC;"(2!A_TzvmSHw]:$ yMvS,m2qh5;p.tY ,Ǔ ;{@H\