apache2-mod_auth_openidc-2.3.8-150600.16.8.1<>,yxg3Op9|wRT]~,]i'^KN*w Gk% UC~aUFꨪp!P3/Zf7_So9\&)<״K[ 1 9L\Z >Vs4Sq<|%=h,Fj[ zh0 jbܵ; U˴f/Xv{@5[E:z^tEɲʂ"L$;i*˝^+wI!|p^ J M]{>>@?0d! / p>I _     $.8px(89:IFGHI XY\@]H^dbc-defluvwxy z,Capache2-mod_auth_openidc2.3.8150600.16.8.1Apache2.x module for an OpenID Connect enabled Identity ProviderThis module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.g3Onebbiolo SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://github.com/zmartzone/mod_auth_openidc/linuxppc64le Ag3Lg3L7d0703845d27e4b856b52aa0488844ab312d0db2f83514ca4a4d245b521640a5rootrootrootrootapache2-mod_auth_openidc-2.3.8-150600.16.8.1.src.rpmapache2-mod_auth_openidcapache2-mod_auth_openidc(ppc-64)@@@@@@@@@@    apache_mmn_20120211libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcjose.so.0()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libcurl.so.4()(64bit)libjansson.so.4()(64bit)libjansson.so.4(libjansson.so.4)(64bit)libpcre.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse_maintenance_mmn_03.0.4-14.6.0-14.0-15.2-14.14.3g@f=@f}T@d,@c@bV@aF`@`e^_@]{@[v[GZZ1@pgajdos@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.compgajdos@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comvcizek@suse.comchristof.hanke@mpcdf.mpg.de- security update - added patches fix CVE-2025-31492 [bsc#1240893], OIDCProviderAuthRequestMethod POSTs can leak protected data + apache2-mod_auth_openidc-CVE-2025-31492.patch - enable the testsuite- Fix apxs2 binary location, which made the library file be installed in root folder, bsc#1227261- Fix CVE-2024-24814, DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied, bsc#1219911 * fix-CVE-2024-24814.patch- Fix CVE-2023-28625, NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied, bsc#1210073 * fix-CVE-2023-28625.patch- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527, bsc#1206441) * fix-CVE-2022-23527-0.patch * fix-CVE-2022-23527-1.patch * fix-CVE-2022-23527-3.patch * fix-CVE-2022-23527-2.patch - Harden oidc_handle_refresh_token_request function * harden-refresh-token-request.patch - Fixes bsc#1199868, mod_auth_openidc not loading- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter (CVE-2021-39191, bsc#1190223) * fix-CVE-2021-39191.patch- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption (CVE-2021-32791, bsc#1188849) * fix-CVE-2021-32791.patch - Fix CVE-2021-32792 XSS when using OIDCPreservePost On (CVE-2021-32792, bsc#1188848) * fix-CVE-2021-32792-1.patch * fix-CVE-2021-32792-2.patch- Fix CVE-2021-32785 format string bug via hiredis (CVE-2021-32785, bsc#1188638) * fix-CVE-2021-32785.patch - Fix CVE-2021-32786 open redirect in logout functionality (CVE-2021-32786, bsc#1188639) * fix-CVE-2021-32786.patch - Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix open redirect issue that exists in URLs with a slash and backslash at the beginning [bsc#1164459], [CVE-2019-20479]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix open redirect issue that exists in URLs with trailing slashes [bsc#1153666], [CVE-2019-14857]- submission to SLE15SP1 because of fate#324447 - build with hiredis only for openSUSE where hiredis is available - add a version for jansson BuildRequires- update to 2.3.8 - changes in 2.3.8 * fix return result FALSE when JWT payload parsing fails * add LGTM code quality badges * fix 3 LGTM alerts * improve auto-detection of XMLHttpRequests via Accept header * initialize test_proto_authorization_request properly * add sanity check on provider->auth_request_method * allow usage with LibreSSL * don't return content with 503 since it will turn the HTTP status code into a 200 * add option to set an upper limit to the number of concurrent state cookies via OIDCStateMaxNumberOfCookies * make the default maximum number of parallel state cookies 7 instead of unlimited * fix using access token as endpoint auth method in introspection calls * fix reading access_token form POST parameters when combined with `AuthType auth-openidc` - changes in 2.3.7 * abort when string length for remote user name substitution is larger than 255 characters * fix Redis concurrency issue when used with multiple vhosts * add support for authorization server metadata with OIDCOAuthServerMetadataURL as in RFC 8414 * refactor session object creation * clear session cookie and contents if cache corruption is detected * use apr_pstrdup when setting r->user * reserve 255 characters in remote username substition instead of 50 - changes in 2.3.6 * add check to detect session cache corruption for server-based caches and cached static metadata * avoid using pipelining for Redis * send Basic header in OAuth www-authenticate response if that's the only accepted method; thanks @puiterwijk * refactor Redis cache backend to solve issues on AUTH errors: a) memory leak and b) redisGetReply lagging behind * adjust copyright year/org * fix buffer overflow in shm cache key set strcpy * turn missing session_state from warning into a debug statement * fix missing "return" on error return from the OP * explicitly set encryption kid so we're compatible with cjose >= 0.6.0 - changes in 2.3.5 * fix encoding of preserved POST data * avoid buffer overflow in shm cache key construction * compile with with Libressl- update to 2.3.4 - requested in fate#323817- initial packagingnebbiolo 17443848472.3.8-150600.16.8.12.3.8-150600.16.8.1apache2mod_auth_openidc.so/usr/lib64//usr/lib64/apache2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38315/SUSE_SLE-15-SP6_Update/2ba48ed6ee7f6350d7f0a188b95fd233-apache2-mod_auth_openidc.SUSE_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linuxdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f34cdbfea2c34b7b54a2a1c28cef93ec748b7af4, stripped R RRRRRRRR Ro!f<utf-8da7039d1eed514ad26d6ba71a7be81235e040b709dd6dc09942eb333be73022f? 7zXZ !t/iY]"k%$6"5okw@_/.PS8;otyRƵWhOiJӟR.p$5O[Ft'**4('EdZ $hDp+NImC1-⸡{t6jSRYݎ[0NKgX!^Likg!\qO=(막#Y:ɲѻ0!94#K]>"?.g_ rsj@X}d|-f;wc] ^*Ṡjw4y7R+g棨:<ܨ2&Ŕ< ә%L;m#?2#ҩ-F2q.!&_)% J#\Xċv&MJV,q.Du s,bB(e8ywUQ5X#rYlL'$!5ud2>xWTOg~{"ܪ\6٬\CٜjYh$`u8ei'N.0&coɪttg@bh݉Q//F^q=tHR_ HΈh%#B#، 6a.@bJ|x?qhMTrUZL\qU9zln=a1>]ŏy`:X늠;cyd+gԪZ3hlW'.IcKN+p]ݯG<`4ՐT1h3z"֡3*s uCdMT. CR5 p)*R|#C$;6zꗍwGlnwh,>?.q_ǵ֌Ρ$Wg*NAM@v &j~+u:Qq5Z}fKӌ,ɶ€eu4vX=uRS_eDd t'>Bo1ڼOPM;= H9TW#ASXC.,zˎ$䮱'ѯEH{{oL&:珰76>RS<IƓHt&Z }}nD>`4(ʀ&Ըvފ:{'+^Qes ?DMDTҩT9]eaJ2#b́Fk|7I|C$RK1H7j9R1agz>(ڈt[w}:N Z`YMZ0Ԛ2MqR\6Y E3rJ•A1Ʈ;oml_q:Z15#'ZW Z(3yfˈ}1Mt~7}‚tw;]4tI/5,i1YތTM$}Τ,lkg{Ԭ:. Q j^yAv?9ƹ#iZhbyР5-Y>EK(㬠c5)%=3;HෂJU⿵ a*򫓕v5\@M]KodI(C 60ח&~|b=x.g(Ԫqixw x5o:=<]) FI6wzB,W}2^f #jTYN1HLHݽ9DF- -WS)Sq53ZNZ؞/w3I\Oс=_exwB XRd=;#oǓe4`*jiVQX"־d}3`bX֑Azz2άj#V!]p bMO{rq(FvF,̋4 +qx T(o%ù冩l];!]-CLWh S"WOB{p`2Dadm V]֦cRHN~G^C2-1ubt$Xnd>}zladb Wi GA\9H(A5~8zߢ@Pt}- FH1@(91IZ2I5ڃlje40a@dv\H>C(};H` q7AU4@GGR:h  Ux+h:TVgSX.d C)㏐iXۤDg2m3RJKt}&AS%\s{BK4FF)E)[YM"-Rl|i;^ w7xزc7G7ؔو. is d|VyC ߌ9߻^"P$#o 0phœJ * _w3w b)ݑVX$sY >"o!+EZ5V`Χю~G^tjG:_ }Ԉ8dž:F^Z"[ۚ2jGTrg:gLW^ { ԹJ=Jv1`tLi FYfbیi0@L2}p@Z?S"ZT(fSYpmFb/4\Ml5Y />'ycZuGɚG-]VfWo  Ae1g3*f 0Xg$P(91 ;Y4-`4wY$(2`2,{TNOSe~?^=eMMƉeC5X@b1_QqBE67q*ˡD[)Z 'm4zi0eN]/t&5 RiB>Pk w`wC\ j+y$߾=!v"ThR>4"Qp9-F%(zM*j_jB)=;t_; E$17{UCi=|ę_ C/ $cdLh9R$3ÒU{NҼU.<--E˼vdIMW*[j&I굮nzhfy-#o/;_IZ=933~baB#mLF$Y[\ yY^ |R\-|@ĶK8pPXy [g2 XStlԱ-ѯ$iTYyTs~C?'qKJuSn%blEiK4Lr,se|`ҼBڔh~UzmU.m![CC~92"v?{~|}(JXpFEMD>a&A'm0ZkyەËEzv"'X6w_4R0#.#aFx(})󨁅 WaǬ0dv#,1TN 3y41'bvN{M,7JױGRfd P xP|C !PZuS!1PK( ${d\u7"3oI 4xGH+2G2.Lq]N0sM="֋'Dgi^1ʖ^Oe2Y=:?Uz|˾2Rg'Oyz_`2#?$ ـžDZ%LNr} |c`)-gCvm5 KZ/R&.G!+V&pV_KR;dۙp2Nsy!j-$4'M6_þɜ6,ۑpݢbgI'7Ĝ`xM,}50a`KJ6>bU.ytqhn&/[M1֫['XAf4G}Bsg~\xJf4^ CG>3fjѻEѰp.XXPank6HVk'x}!w衵`geP wEb%>3 BB`uz66<)ga.&$a hSuP_90t N"P%Z،&oK?_犉U_ #E @mb)][a'r\x6R>)߬x }f*R$-Cq5$it#(NG|-8)Ju?4pp.AhE(Q,*7y|))5~9"[ oq_g}GXWA!>\nC໔QSw&/Lٳ-ձY*IʥDEV`THdHPA*a0? C+ Z`V%3GOOy>o7Kڹ7foӧfʪ䩜kAWml5K@pyDOat^Mxf/"йJq5s "E67,$@6~"a7%#XQh[P8HC551!hT9UWJ73t-Vk=薀XI3h*q# ]9_6JQؽBiNF|z\FJU]{#)Cw7*ge0mqnp"z0dx Ct3y6wl F^MJGI³#]J-w# pkxحҏ <[Tk>ӘǮ)&wV8j0 ~ ޡR')߇;hwX"Ca*߱GM G2/{ nV Vp?ucbFwH[$~Y3/=@Pq.)Ki!wi `6@]8٨~C2[kG>lj-W^w;Ղ}1 \{0̠n,E@dxA%gkA8W00'6Nwf^ӱ <@2˪U\L:4 . g? a9T0|=8-HK:7ӭ9 eÂ%<qθA$L\Rki/tz+`#EV,y)Ѿ@ぱQ{Q bE8iH&oiXn [FfNr>b$2(FXdKіpZ~cZ`D^PTHO#;QL,,%QQ`!O|kI'1٨CBO 4im q;_}yb|i6$WI03e?"{5dg<O۪A_G<3@U-W9Q1"K%2QA>O=?fuH(׍C vt?Q}H--Jq&M/ } `9 ,g}a;Gln{^\Йp'ė&׷~)XGuʬ>Q#yRWZ묅 =S<B6fdAbMGQM{R~᤽ƚm"T>zҡPYof`IX& =o?~7&:I>eCCƛiFuyFf{lM,&On '6fm]7=ތhlϗ.u0WsBC`*A>Q0AAN[`D5-;^_CLGS2w"r(TO7o׍d$k R;z2fG0MfQ#eO ?@d5y|.X#FB jMs+l~&!XT}$T gK$mP갰C^9h:Hc2J6ٽJP_1ױQH Ik{/-R 7Vʅ{IlWIsWqbl)|Ngu=xsk;hWEb?"c@ eR}/2UR٤HJ=J#^W's']ʸ`40j*%xwylX2A}Kfm-% `Z#ari!gsaB6t-0f'RJp?QGCX? <ؠصT҄Ph~G85&\m*TC #+t`HrG>I>{<(ZqWCnȼ-0&&C93kX_oV YەWlr#&o-EjoG%zRi)p,.ټ0]FՑS vRILֻhBw.ZXҎhyIdIݼmR=yXffx$YaaeD2q^MB)P& &;&\|XTP?:"-'H&'ϔ~#J8er,;+˝F>=. Xk,>(ֺĊػ9An+|t&5 /ڥUDDA4rKd_#/V'yW5.U=_4 E.Z['&,~% XO#ƅs"SGblW\%nKLPJ.uUV3,x.gQS\Rc{Ğk@ťa1x Erj'P:O}~;xەIsʽtZ׍"H!6IG~uFS٪1tګ dHJ)W3O'.0z9w(_^q" ?Cr4=ٶA)j\A~X\lQ4npr1 ql EJ^Z#KL аP9"v L9$v]kE7b0EUedw{6-pN.^HͭY"7[6"YRw9>_N%9FkbYԧ :EKӈt\z\NnvÝHHkab7h Z]q34gox<[tŒ$w3 }2qvfuIYgΪ "(ADq anREc`s'mZxP( 3?OV;2Ek:+H |:bz&SӜ T&ݰ.ʟME]amgb ٗ$`U"7C= \]pFU)"FrR((1 D [(jۡ p ~Z6 Wo78٥1L5F) _+0O"Kb+J|YYo:5B7|TSjwlV ˩5Y#bXP?ik2{e(/J kQ }{S=i&H*NMP͍w x&MhuK>GFQ)I@Jxŀe4/I&3OHN4ǣՕ77{Y{+MZω pcq۹IYH#'[ڡZ&`i4_ٱ̐2@ar^k>ITDg֪|6fݱo>۳X7w')Yy3r䆶,1ն+?Do|Æ$HuEU{YĸBi۫Q?>[eH"k+29_WM$;o۠Ò$-.One;nv>Q6j|7Ua(ub˅ # 31DDxG ՓFgZǕM5ZA8 ~B"w5;Mk7^z\@[[դ86ptP Mqc(*בJ9i.p;D. R*jCQKü#%4o+ph +9_aGz!k?D+PLIٔV4!r+Acb߈??e(8Cue2U 8v}8ɠ"ⅡmA]ݔ* ˄CQTH+E P) 1dȲ! iIf?<N]q ơ>Qz 4@| 5;筪\OSRx<ވ݉2YeeY >M@.XG;岠l8UHW<7A8 JWC _{QG)X 4dB6:" VG-M   O'͠_(вUCws1jXx7SOnYn-=,d C'FسԞ@-G|pPtB wJ UqÙfpY&`ǽwU"V8n /Wv kGX-N?6@c}%] +,8q%%Vj=c0^>ŃĤxPXEj;JO[\EPV8tU)[lb'(\@P_1v\dƣMBr9(t|INcd~HDh'UfWP "id5lc8[9V*;mFfmIf!].(*2E @ XPmjoq|Yn@ ZvVnYH6$C.5<tI3Ivl}. m)'@89Gum^|u LmC AgRJٍ=m=l h5F ^1? Ct'mXzZu &F/ꓴRf!'9uo!$"@zܷLgk@]vI yDDI֝&"8R,|r%YLxR4t vU?IH9c.a'Zs唾Gg~>@֟R֎Iw8,$Jq:[a!.^1 KXי$ J،J8g9OO\? K!I7""%A tu`G'HHYN. 8,) e=GPR?d.yIcjtUKj .] m>¤,vdv: Ze›=gx&##5+1x/&ʓ`{>ImIPwj(lטmUL2b_%r )]&6RrZm(y(a/z_{^F]j#2{F 2qg@Nno5(TwLE Sx"@& 1AA*Na` ).1NI Iˑ,1cxxsyD-\~r| ~zȦ\̴z oS Kт韰 'Q bEAu.Y(ZNb2V"d1I[ 4&*_I7~۰s]}g =Uvax{<1!(h%ׇ18Z݇q1!Йl ځmI`R~Vʭa[2EtԎ_'MfL;kӠc)Ǡ|e9`\׬YQJ5Qܕ=yhEo#|kb]MVfm6 W_ICX@cxѝ~̦aT{ ;H0/پn̄K\X!zm#j8%z55뤠5s}E9jvpأN[ȣlVKVש]ګEL5r#, bîxՀx8"zzъ\g]3 2>-\dQP֛!TsJ n;h)eĶ.%9i,j©{zr&KB8+G!زYB:#", SvPvsCq]Q-InL]җ$@PZ/C\$Km&~ywT&I䳈o 5R5( `|6ٲW޹QSPHR0&szSӏjrkWJ]8Cd w3}TDtfMO\w).K@[0G8WXZ_l- *3*h8rF 5z?3)΁7lB)Tf?\b{v7~ILuvX#eh\~Gi;3l /R~2HJd<_ _xĮ '䱇kRXQ,G:=0$d禥L5%_m9 *`)~* 쇩orm~)MF -7ю.Vp@I["p(EƬaam{^wU#H6w]>N1I]K#~ڎ4յ O SC ,AUvt#2N Mou0. *Q [cZ%!E<(+i3 $üDHG6b\*:q=\ªo5]jU_P+$Kw4-:]vsLnkxҮg8k ^ #0U(BGo&7KwmNsOE%xD+V.t]V@82:ꩋF@^o}&`J!dG}={(iݬ !b@f7Iy9T)C^I%kͨLgҙ U~Ȋt_pȓ2xm \eW%3o>PA˖jGC˹mhXst5S֟cr%|7_qQ vUfی"]_:\M{e%0xYi6k%Ӕt3b*S9?mP: #wN5. /*3`K&Lh}8ƑH~`!0uZ; 'c̘Зƫ_$G3$ro)vts76ʹ64c'Q >lEkv%9/ZoT Qm?2&@pet)\9\!%:R8U]*u|jV7WR0J]K`# b&p/ Y@-ڴָȫ8s1H>d0Fr:vy'pI RߣTز(p=B{l͉SrÒMsZ$:nvDlRê8S*_EgW@x&^Ŧ#ŝ2XMh; Z>vݯ|`}й ơ H1Z")agW d{e/Rt=d2g_v;%qh:W#TE;gi5TŐ9D&1\_mVXQrHN7ؓ<J{k$WSoh@2nJfuk!vzj벤8il+"K#Ỳ|iBGE4@py]x@ Û-:enJ8JcP X} _h> l/8T < s`aÊCO T/Q.= & ,K&/cewcNEi )$dė ?w0/j.]B`YHt^`\#EZOU:~.uL1Х)Z]کK4j *3rғoqSZu q҈pjMIf2ywt+"i+G/J-_$5߃9lK4ףn* =X% 6++Y;AI²w"N*+UFL T&P(xѱ2'w hN+u@U-e+W^*yVdIлz 8iNT h*pNQ#S,rbNaj= \ ?zvvR C{l8+f_'rE[P DSaj,#I'l..Tw(v 5gʦ}բl:3B+ kt>7' k*pv -윹 nKfҊ%dd p3DŽb-nǑK<5< \Ϋp:9ez D[zq]YÙ*YnZލJ-*f%^8r8ț\DV LBq 1 :@QXkm`sdԄ6F[Ms{s[&/=&qD&l o=|Xl(v-eU#d+B.p“`NMdHܥZ 2~+ l4}4,Z1r9[c1V|?;ޭ+LVY|ymn (}uvj%W#/@ dC }E%*@`sw/W1-\pKw^?s!uY;6Q$7nߞq EƘ-'TVWe|de ӹ]|xp~}PbTY&S*lƝg,2i/0,뚿t)rp|P|5Y,g3 uTgFB:=Pި&AyY3/f&Tb=fYK U`/i ̓x7xY=<Á\Z@[t({";΄IKVlkO eYUs.@BkQd|5>d.]K8?4b)N0zfI{3sh5N3C y)HòK;~[9Ka(I8!canQAj ҙ,=f<)2ZZHK,ϑRgOGڌky+'fkܪK^~vAKJgfS;$Ip~.X뺄BǴ5P/.CXj>hjFhۄBMCphJK?q~a^5FSo}TnbOfsؗs"0!/F CҦ?k՘!`' eO.5.\v2r̆99PJ$I_SxXN4Jf??3_Q %#h(~ctR_r9Aq;E>Cx~ ay\LOǫq\}4CGEj/iSJmCIP$"2׾ϝkt_ُtztIӠIy"ڬE* #g ~(בď Ўַ{vo\.MOS(뗂v*6њmĻSCd o΍y[ZX/Țڰ9(SΆfuD ]j%ƌz%K_9{XؓvlڂM@ki #\m̿c(?Efu[74fvZ(VS*r mJdq{19u [홃HY"cr´Fzzb%4Z=jۄǖT cHDVTXK^ju>J̠Q_-􀉏pȠxvZ]:5r>vB~fݡP.7Ita+LV{~|5hG;0YɈ4dӘ$2Wg