apache2-mod_auth_openidc-2.4.17.1-150600.16.17.1<>,*i>p9|n-ܓ` ; CC^zEBZTu5}>/B:lQhO< 2? D?& &)H+xhFHF~V?a> $? d$ 3 t!BM c      (2<xm(89:uFGHIXY\$],^Hbhcdefluvw`xhypz Capache2-mod_auth_openidc2.4.17.1150600.16.17.1Apache2.x module for an OpenID Connect enabled Identity ProviderThis module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.i>h01-ch3a HSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://github.com/zmartzone/mod_auth_openidc/linuxx86_64 HAi=i=544f07151c03079da0af8a404d747bd65356d58aa92c1d0f577d6f7cf511d89frootrootrootrootapache2-mod_auth_openidc-2.4.17.1-150600.16.17.1.src.rpmapache2-mod_auth_openidcapache2-mod_auth_openidc(x86-64)@@@@@@@@@@@@@@@@@    apache_mmn_20120211libapr-1.so.0()(64bit)libaprutil-1.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcjose.so.0()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libcurl.so.4()(64bit)libjansson.so.4()(64bit)libjansson.so.4(libjansson.so.4)(64bit)libpcre.so.1()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse_maintenance_mmn_03.0.4-14.6.0-14.0-15.2-14.14.3iX@i@h>g@f=@f}T@d,@c@bV@aF`@`e^_@]{@[v[GZZ1@pgajdos@suse.commartin.schreiner@suse.compgajdos@suse.compgajdos@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.compgajdos@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comvcizek@suse.comchristof.hanke@mpcdf.mpg.de- actually run the testsuite [jsc#PED-14130]- Update to 2.4.17.1 (bsc#1248806 / PED-14130). - Remove patches, as they've been merged upstream: * apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch * apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch * apache2-mod_auth_openidc-CVE-2025-31492.patch * apache2-mod_auth_openidc-CVE-2025-3891.patch * fix-CVE-2021-32785.patch * fix-CVE-2021-32786.patch * fix-CVE-2021-32791.patch * fix-CVE-2021-32792-1.patch * fix-CVE-2021-32792-2.patch * fix-CVE-2021-39191.patch * fix-CVE-2022-23527-0.patch * fix-CVE-2022-23527-1.patch * fix-CVE-2022-23527-2.patch * fix-CVE-2022-23527-3.patch * fix-CVE-2023-28625.patch * fix-CVE-2024-24814.patch * harden-refresh-token-request.patch- security update - added patches CVE-2025-3891 [bsc#1242015], denial of service via an empty POST request when OIDCPreservePost is enabled + apache2-mod_auth_openidc-CVE-2025-3891.patch- security update - added patches fix CVE-2025-31492 [bsc#1240893], OIDCProviderAuthRequestMethod POSTs can leak protected data + apache2-mod_auth_openidc-CVE-2025-31492.patch - enable the testsuite- Fix apxs2 binary location, which made the library file be installed in root folder, bsc#1227261- Fix CVE-2024-24814, DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied, bsc#1219911 * fix-CVE-2024-24814.patch- Fix CVE-2023-28625, NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied, bsc#1210073 * fix-CVE-2023-28625.patch- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527, bsc#1206441) * fix-CVE-2022-23527-0.patch * fix-CVE-2022-23527-1.patch * fix-CVE-2022-23527-3.patch * fix-CVE-2022-23527-2.patch - Harden oidc_handle_refresh_token_request function * harden-refresh-token-request.patch - Fixes bsc#1199868, mod_auth_openidc not loading- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter (CVE-2021-39191, bsc#1190223) * fix-CVE-2021-39191.patch- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption (CVE-2021-32791, bsc#1188849) * fix-CVE-2021-32791.patch - Fix CVE-2021-32792 XSS when using OIDCPreservePost On (CVE-2021-32792, bsc#1188848) * fix-CVE-2021-32792-1.patch * fix-CVE-2021-32792-2.patch- Fix CVE-2021-32785 format string bug via hiredis (CVE-2021-32785, bsc#1188638) * fix-CVE-2021-32785.patch - Fix CVE-2021-32786 open redirect in logout functionality (CVE-2021-32786, bsc#1188639) * fix-CVE-2021-32786.patch - Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix open redirect issue that exists in URLs with a slash and backslash at the beginning [bsc#1164459], [CVE-2019-20479]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix open redirect issue that exists in URLs with trailing slashes [bsc#1153666], [CVE-2019-14857]- submission to SLE15SP1 because of fate#324447 - build with hiredis only for openSUSE where hiredis is available - add a version for jansson BuildRequires- update to 2.3.8 - changes in 2.3.8 * fix return result FALSE when JWT payload parsing fails * add LGTM code quality badges * fix 3 LGTM alerts * improve auto-detection of XMLHttpRequests via Accept header * initialize test_proto_authorization_request properly * add sanity check on provider->auth_request_method * allow usage with LibreSSL * don't return content with 503 since it will turn the HTTP status code into a 200 * add option to set an upper limit to the number of concurrent state cookies via OIDCStateMaxNumberOfCookies * make the default maximum number of parallel state cookies 7 instead of unlimited * fix using access token as endpoint auth method in introspection calls * fix reading access_token form POST parameters when combined with `AuthType auth-openidc` - changes in 2.3.7 * abort when string length for remote user name substitution is larger than 255 characters * fix Redis concurrency issue when used with multiple vhosts * add support for authorization server metadata with OIDCOAuthServerMetadataURL as in RFC 8414 * refactor session object creation * clear session cookie and contents if cache corruption is detected * use apr_pstrdup when setting r->user * reserve 255 characters in remote username substition instead of 50 - changes in 2.3.6 * add check to detect session cache corruption for server-based caches and cached static metadata * avoid using pipelining for Redis * send Basic header in OAuth www-authenticate response if that's the only accepted method; thanks @puiterwijk * refactor Redis cache backend to solve issues on AUTH errors: a) memory leak and b) redisGetReply lagging behind * adjust copyright year/org * fix buffer overflow in shm cache key set strcpy * turn missing session_state from warning into a debug statement * fix missing "return" on error return from the OP * explicitly set encryption kid so we're compatible with cjose >= 0.6.0 - changes in 2.3.5 * fix encoding of preserved POST data * avoid buffer overflow in shm cache key construction * compile with with Libressl- update to 2.3.4 - requested in fate#323817- initial packagingh01-ch3a 17726177902.4.17.1-150600.16.17.12.4.17.1-150600.16.17.1apache2mod_auth_openidc.so/usr/lib64//usr/lib64/apache2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43029/SUSE_SLE-15-SP6_Update/b089199f0ec789a81bda0170079de920-apache2-mod_auth_openidc.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f2794c7a6b91d4d3be7b33016464930971f7d8b, strippedRR RRRRRR RRR R RR RRRwuuutf-8303c5e9ce16078375cb4549feaf6dc16f5153c7eca8a9f63d69d6b7b180f7890? 7zXZ !t/]"k%"5okw@_/.PS8=TXe+_dsؑ3]1 :|9$kV.Є7PѼ98!Q~}Zqv\4Q:r<ܥj&24[4B5x[@LaZ:SJ_'T3A*OY3XQi2}}.eVHJb2%ՓcomQ}Д)_QX%@m1IxiGieܧ2tozdIr?,t<}>Fw!|#(`< $9kqo'T0﫬v&D3FmbS'u"_MM >AYZXCJ[ta2f1s}Eϰվ&z)P(:$qZ kd~ն>{4T݆ >!8"EcG r)*Kk5H2DN@iuJzI7뎏 ȷ!)A8@}/"WhH1iP qƒ t/(!sI|,rX&uܯ M4%Ai8b/C"VKYyEfXTTUJ gifU"lsޟJI8W[ sXFnF}K|A#BF\zcC{jX8q_K6_BJ((>A@s^{ N$wJc.X׭HhEӝFoaGMĶ lzɋ담  29F3ӋL(JeV?&l@A*cd鲉{3i܅Rz,4 |j18{qA0AB pJגB58͙_+9kUpp^d(ۻigdWr'g31[GRIC5u37h55r&,ԇ3'P*;ɾτUv'VTλXW BQz,E/H}69S:OL2YėMSREvihoxDܰEfte؞طcg$;]l!0c8ƒ O[>jc3 ɔ<͂