apache2-mod_auth_openidc-2.3.8-lp152.5.6.1<>,ya?,/=„PX͡3d< YYj!ʗX<ز w@KezGġc8LUsD$"|ު*,0ݭD eJeg/B4# @&^A*.Jۉ@u J9~pXl̎~$>׻"QXYMRn? Ty Dխ[&aH-ߴy(<Ps{Dg*]Ln!šuıpN> ?d! - n + Dh       T\+(Q8X 9| : FGHIXY\]^8bXcdefluvwxyz Capache2-mod_auth_openidc2.3.8lp152.5.6.1Apache2.x module for an OpenID Connect enabled Identity ProviderThis module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.a?,obs-power8-01HopenSUSE Leap 15.2openSUSEApache-2.0http://bugs.opensuse.orgProductivity/Networking/Web/Servershttps://github.com/zmartzone/mod_auth_openidc/linuxppc64leHAa?,a?,1122d4fba1321351a54ba9ae73f0b7c114934c13e408b27b3d7777327f2224b8rootrootrootrootapache2-mod_auth_openidc-2.3.8-lp152.5.6.1.src.rpmapache2-mod_auth_openidcapache2-mod_auth_openidc(ppc-64)@@@@@@@@    apache_mmn_20120211libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcjose.so.0()(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcurl.so.4()(64bit)libjansson.so.4()(64bit)libpcre.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse_maintenance_mmn_03.0.4-14.6.0-14.0-15.2-14.14.1aF`@`e^_@]{@[v[GZZ1@Danilo Spinella Danilo Spinella pgajdos@suse.comKristyna Streitova Kristyna Streitova kstreitova@suse.comkstreitova@suse.comvcizek@suse.comchristof.hanke@mpcdf.mpg.de- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption (CVE-2021-32791, bsc#1188849) * fix-CVE-2021-32791.patch - Fix CVE-2021-32792 XSS when using OIDCPreservePost On (CVE-2021-32792, bsc#1188848) * fix-CVE-2021-32792-1.patch * fix-CVE-2021-32792-2.patch- Fix CVE-2021-32785 format string bug via hiredis (CVE-2021-32785, bsc#1188638) * fix-CVE-2021-32785.patch - Fix CVE-2021-32786 open redirect in logout functionality (CVE-2021-32786, bsc#1188639) * fix-CVE-2021-32786.patch - Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix open redirect issue that exists in URLs with a slash and backslash at the beginning [bsc#1164459], [CVE-2019-20479]- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix open redirect issue that exists in URLs with trailing slashes [bsc#1153666], [CVE-2019-14857]- submission to SLE15SP1 because of fate#324447 - build with hiredis only for openSUSE where hiredis is available - add a version for jansson BuildRequires- update to 2.3.8 - changes in 2.3.8 * fix return result FALSE when JWT payload parsing fails * add LGTM code quality badges * fix 3 LGTM alerts * improve auto-detection of XMLHttpRequests via Accept header * initialize test_proto_authorization_request properly * add sanity check on provider->auth_request_method * allow usage with LibreSSL * don't return content with 503 since it will turn the HTTP status code into a 200 * add option to set an upper limit to the number of concurrent state cookies via OIDCStateMaxNumberOfCookies * make the default maximum number of parallel state cookies 7 instead of unlimited * fix using access token as endpoint auth method in introspection calls * fix reading access_token form POST parameters when combined with `AuthType auth-openidc` - changes in 2.3.7 * abort when string length for remote user name substitution is larger than 255 characters * fix Redis concurrency issue when used with multiple vhosts * add support for authorization server metadata with OIDCOAuthServerMetadataURL as in RFC 8414 * refactor session object creation * clear session cookie and contents if cache corruption is detected * use apr_pstrdup when setting r->user * reserve 255 characters in remote username substition instead of 50 - changes in 2.3.6 * add check to detect session cache corruption for server-based caches and cached static metadata * avoid using pipelining for Redis * send Basic header in OAuth www-authenticate response if that's the only accepted method; thanks @puiterwijk * refactor Redis cache backend to solve issues on AUTH errors: a) memory leak and b) redisGetReply lagging behind * adjust copyright year/org * fix buffer overflow in shm cache key set strcpy * turn missing session_state from warning into a debug statement * fix missing "return" on error return from the OP * explicitly set encryption kid so we're compatible with cjose >= 0.6.0 - changes in 2.3.5 * fix encoding of preserved POST data * avoid buffer overflow in shm cache key construction * compile with with Libressl- update to 2.3.4 - requested in fate#323817- initial packagingobs-power8-01 16315208122.3.8-lp152.5.6.12.3.8-lp152.5.6.1apache2mod_auth_openidc.so/usr/lib64//usr/lib64/apache2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16938/openSUSE_Leap_15.2_Update_ports/7ae4ee011a8fa580d092fa8ef086fb7f-apache2-mod_auth_openidc.openSUSE_Leap_15.2_Updatedrpmxz5ppc64le-suse-linuxdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d1c5ed154d6e4ed9592db368b8722817e138a968, strippedRRRRRRRR9E{V[(mp&utf-81d4ece53ae5cfb78b7f0ffeba76775ad8f882bea8b22d281415ba3b2ae19c2cf? 7zXZ !t/|_%]"k%"5okw@_/.PS8;oͩ*Y` n1g;lyr^&Qc13rQc+\Q55_3GAVZeksYw/[fYőg,"@yx(\h!)A̰)WK,()8+u0*;=pϪ[tPE ޢTc Ȗn !?[-ox >4, ^G?&1*jyUgIGKQ](~):CuxN-ڡ>CVnB"(zO4i2f]Fr#IHNMr/OZ&@χ6ż"x9gE ܭuj -4!]^,;I@(V=D κSˠ" eRgh$D DCnuTI=QC_fjeM<'+b[4mMu:P5 iv9X)d0+Ai^4cH_-#8 d\JUb[ӝsgMz^5kӮazDcPA }/dzrT^o{՗TBJA @䙱,̯g]E)_}qc%+M8D).Js8_S Yc{Vf Pe|<,tjRaQFϦYOVԖ G41Xy/3hBO;ܥQiz4sݦM`N2*>V-45)o@)r_d2^ )t *it1ŒKtSRگp=U#rG"ߍ\qeĈqb^.fuwm*FPj 'J5Y\>6"ȻZL6'J߸%s%92cE?yn K+1=y ǒʠо T\ipPF#(ǶjsTUpZ<0К$ݱc=, D^^\XLRi=kgJ+fWF!ᘭ! u70_;d6 ) J-ed=IiV!C4al; Pxn6u|!nHɰ7o71E^x);2p:e[Y6/x*cslѫܡN(&ץw7s|]~~9k{o9 /9oGߦfucZ.'R?跔]oA)RYפ Q_t&o⟜X,hߨѤFMo`>7zhMѹhԫtBiiE [Ճ ]>׼@ :5G/HZ!(b 8U)7{nh nk73Z9,Sy}m Jk<\O;{\8J j(v r^JX Spٝ4p$>pDQmR?ׯMqIpaj"V L EnsTDg40rTٜfK'te0Y 8Ds!HZI>f"ͬrdd^aN[0lP;!%xaamt\[Fh6h$Za{avʒmt}zSC=XP kf6==->euvDYe42ȶ7d#ثWf׃4*$˶N vbUKh=ӷ1!pt_6lR I!*PVȄHn Yt}kZ&UP⊢'#ZR-S#o~'_KT)5嵰n{ k ÆQ_Y3)=2pݴT |&*ۺ/2/i̓9[Ej:& Cs=U^11-nѺWOܞo\TQ v .mP @XԗA!yv;zS%~dlyXG@6,V2_wyY"[wɈ sRW%,aa(F}fHmQ$Am8}M6uI^Fx؎k&#;6J7~Yo 4Z" 8XNg|:d[OGJ s޸`@|DmZ-9Mp]ӌE8A%&Dx!Km Jxje|;ʰc֊2&Nv,:^IT//," D>D$Xy[4؛xOFn) 3goc]aЁxA'b:&HEɏ27b6nrsfRWؾf|9E6h7u!ȗmU ~AknBfLQM|q&k&@gIRV>K)r9ʾ,׃2m BSo o|tm-[/}bI!&|@d w E4+7`(C'𥱨{xA?<$}%ؐ|n t]v0j Ȇ4pa,) WOwrV{(cP-d3((U8;y5o$2vT+3"q>/_.PqEŇ{=`KL%P7!{Xg}js3pwOZQա~Z NTIQ7":/TU i%4+ynҷS.]aj/^kǵ+I /I@I 6d[pS[;h}V)-.];9COL.vVO)C;x=5/ZH e\8BW.5^ BzhP/Oh`y]Q}2r!4 XbXCi_ ܟGҢܤ* nno4 ;Xt[_X(|Tɍv}v5A@4 hlu 澶s̉:ݕSE}I@k+\gn.ja*{|NTov*$ޚ9fdE9^: pp]ݡ(|e6KqeP>ߧ"6s@Bdr?9AY0.'Q(9}Xy,w^aR{^ _2ҊJ5|l8w-ePBR!'Sܯal3 =HLfjyWlC>&XD_s&+]ٝDJwEb?X> Vy1U|px iI7Խ|PMacLABrB7΅T&tҹΣ \gFm-*an: 7=jSDV7M9l|| 5xǯ2C0P?~ ql'ƪX΀aDrV1s]i׺&o"4w;kpo|rᅶnܘjj% {`6rnVєW].B(b׫2D})v_]``wĈz7cbbHNH А~([q-{L k*H~#||s3m*vlo)|]gP3UHk7j J7 8ŤU{{2냢RA9c QPl!( c: Pw1c매`cFaB1Z,.b$p#o_hz4' ~ԛp]woW(ns <l $<#:`LAKb`::,>g}cX~Ւ1D*m@s̮+゠H[ވULdG9g%헍pXpz(q+GXz{e JC9Ўn5̤iO iV}}㨾s21 0t 949y/b<4yמ"?x2 iavP0T;r \y7^dWrdvMba%>$<)=Ywǖ ȫK7)b/1482YY;ppʒ!0l'V+Ds۾5->ĸ}m&Bfil0mky3g(e3 ,Q0j?7/'eJhՁև2 =R CnM/Ԗ?8l_d+PWQ8uېd')#Q?7!׊x fd,5cq_=r2UfNT Mt-bb{Pc]&u8/P2;V4ֱi#h=3=g39o䃃~,L*fAurkO<&!r-~IԿ율tdp?縿~C,&t>9܆}xU{I?:N`c(#S*ڽ5?*Pinig/|[Vˆ4mmjx3W5 Ѳ52M'bӜA{8h;x~#nj 1Sf,;~.=eeG)+燔많`(Q-"WFg+2])Ai9+AyQ%qFb2&;)cկI| }:]c)%bnhhuwJd~y&VFI68ӷ N~=@L5'~rNYχ v`3{amKs:MT:p ҇EDRT[ſU3]DЁ5*fV4~Ԕi0ː \^\[11Ey3c@ų\$,UkJx,OR 1P6zJGc:e#A5B|LO~v`r̟GJc<ҴZɧ2fQHCϪ%X ʫIBaʎubpCN[<܏*PC\;Of@_4-?R1C؏&7[߁-kji/r;꟯"uP\0 FVo@ؙ95Z @u[:c0)}Kl*7o|!3vU=<|f 5?ozTRQvcO1lxYB} z{$ͨ):Gbߔ\-643rJv $:Xۙb E`;W`|E<,nu`mDo/ory>}I%]<3册>7WlaEʸ>`Q߄_ltXEl4guGQIs|H-8 Ou*) t&JsN%Z;.g0.NzF~ؤizًB#;?丣RjހVR(mO J <'1[ڀEtAZB^(_Aqd#sDPl”OEAKDKq.^2%iZM8ܓ??tLO.z1ۭhKZJd.^-q,Q) %%_fp Tػml4 @މ~"+8JmizQ]Hn*3[ժt#Y\6kƳ҅< c&JeX[|OvCTγ"UǞdp e+hX.${&MxePCoٲ 'U GK4EeIolL@ unf43ҥK&!n6/yޝK-HpTRc`3lKfָ.MKAHT%'D) w_3Kz, |Mfe@y9Q2gC;T5ȢudDa)JM>UW2ܬ*9C}ޮJLd.>Rf_9ሯ!3S)i˳['"Sc;H9jv GL.#zNۦ0.ںݣŊ5LQ&F?U%!C֋AUۋG|5J4oޚGezw; w7N41?džWU1b)}Ld/Τ_:{3h$m-$ݝZ54oU,e(; RA1f$0hܮbu\T*K1ġ;qxFK43U\lFG%5  E Ft< x|l6E}Dh ZsL kl"AE`% ƍ[<;юbȑСM/ /` VqU%G /BDTʿWSYʨ \D??Kل_has+GxFl fL]{y*'{GDd8SqZ&*X fi,B1l [[>S6Ұzl, +>@Cmͽ<L cW(j [Ci7[ J0q+X c7QUw^|uN7"FfqHNJ=uDE7Kyvd*֣hɪr |p@Z=`(r?kq7"X {C 騍<}Ui;-CJ .taov>noY|U),\BLO@*؏ g! dϨs:wdXY\̙YtϒϵGf_(,0!'I85UDH >iL7ϩ7V++{x^%lA~+ TCM;&vl\QyhReKN8!5snLb4E;1nݙ!nh-(|U$`7u428kW1ԣŲd%߽F F#"HEz,pM)>;*aKuslfHҭrڹb 2_8j*\9-ijKB6z+.Z#$jWe4jJyqGufٰ~ZvP?jbl)  ׃q8$K6mp>lf'z5y6Pũ q-̞tTDZh=2]^wLJˊ돋HmPwt |BP[{lJ6-=W#hF;V 3/ɣZ3'#5`~+T"YlvQߗ6T2K,8]&&g&zZf,,[{ΦJcyɂ{L'_ga7luDRAn?3RtU#`BXUjJ:BdG?O5./\[G)Yw/bAQfghW7;xĤV pf0g{ԥf̆ZMkA$km4Ez# T_>&,__!{4)e \_y5 ٠M΢y |DYtEc p*^=\Dm`jo3f!+:v ~>ńATk[zQoHwmmbdu&FuzFfceчP!6 n;4 y+;6|S, iδZÆ(,"$} "z4DcA|k6=JlÒPl{JS3̶q[Ai&Հzg0pB_۴26 -~5鶃&QV;(8:o|zE֭GPkd-RDsSVDI;tqC/ ؀0=R> "T2I\Ns:{kyBKQ A>H.ŧݳ2dLb̥NqP:@5%S%7xF˳(jtsu}cLUU?.*suP@+gJ_.Ln؉XOB4{.ǹO Ns9-Y]x1,$i7gk (s:u eUBi?%xJKd (9ڰjfP@oc6 I؃(:;·ޢW,}/阥@W{[ǡ,"^sRڍH̵a3}`~ Ϥmbn` Gw&nL/;QaW9v*%Z&[އ>/by*"-C(LǤחQyng[ւA H<[@H3(aN |,}56Cpu69E a(G#PD+#[R\XB77@秤 geg٩"RXT38M;Miu>Q+SmJ-_XPm.GRHU@ȩ;lQ^[O}' )G+Ol6yE;iijǪ ;0iP^;HHn/bZ.K  `[ }%ʁnWL0l+3huV'gP#$g̔މ*f >_=s ^f@9G&O(rrNF0+jbzs|ySeUkCyoFc6Vu bDM4~ʭɌ'9|㓺>`#x_&q핞K̮mk؛ &] = ~ A]JaP%GvmiuV>x,t!p":wu@Zӎzw}h:1fS"y5OO x}0xgg|iFTSR¯lOXVwDJ%iU:flО{ׇmf ;Xt09]zCI~1#w ,`s ~//@eآ 2x¤%L+wdxm^|ʔ5M2H-F~7MZ5_nٓCyZ\ߦKO7 {9TO[5k$;O4 6xRmԛ].Lߟ& X{:HO*^O34.5fӍP@ 0#Pfz]X{@ޟc_ =r-U >ca iQ=1y(t:),;T˗#FJ4pUu酟RrT]DكP a-ymj~w?{^T vJUc Ώ-?m;P] MgۙU S  eU ʳ@-8b#WMW{Ev0:?ܛ[tz~18ryB>Ny?q dFR!qfHP?qŽL..R$ܟB t8ڦ! ߚݍQ>H#}oxJ׀"g!֬?&㠓B6h]hK@a41F-ivM9VmRMޒ")s{XGfVW*Nek#hz9o5qU3@j;]1D-kzPx?~Y"2o '/Y]6s c37Qrʑ 2xN9]֔(HW EcNXѱh#p%g_{z?5ЙXUiWO~hƪڮRG7Tqt:H0,x`7óz^Ml51 Ħ4" tk7HT"ag/5$e lO +efDG{J|Wp+_ƛSQvF}9Ks^QD`Rttԡ]g`X>@NjX Ó$zդ,j<ˮ}#=@r37J]nwF@I=1+;Σq5u *ĠР6stRfZə'wajd:Huu@oj7m.dq{5+a"ie؂p2m^'eE%uTڈ#L<)o"DDtxOGca=8N>)*}7g"EƔ_r>6bWn#-uO @:kÌ!:dvhJX)1i1 qG|}HNYܓ>=d(h5ue . Y~|ZX-U1kX&U,9 ,QVc .:>EEӂ\ YNErϔ5Fg1~UqG"hN]5N5>?E6,LKѭ.d`ԙ?sS_ ?`Mn4[s0./Usg|1ېp#.oY4xQnLJmy!jҿY +Ch@xnl319Ddۑ *a[2Wqņ9l =FE2'ʲJ ׷6wFq,Y(|mKun$UѼW@MM驲p00+F@ۢh+ahσJ/:Y|m=rʹ.W˞APOS;:HN)8ԭ[uto`w6{ cl&@@2ԣ)>nMgU=D5fSmGXla#GߝNbN-8 8-rK҄:̋v .OQ^" ŭ9~A^cw->UgN҂20T5 Ya&978s>TӸYk͜FxC/dCG´ȤNG,дh]zQr~^ &IFw2Q'r# hQ?4|"ص;WWoSE 딢[_ȼИ[ȅ.|Q咔/y0y88X27m)S6!k~?nfMpCl Fi!9QAJ5er"7S6C}J]ُe&9wM{mhG)/0 +B+m)+$͙WM<:smߜu [Vx|,)Gs~$!6a2Rğ` P@5҄ly@(z!yо?\1כRg>-K2h6;:+*Vb0Q8ԁEâsR-l9)-x̛")C| (}MJ#(uyP *F+^pnޅLiױICip \9ի!6_ύ7Ad}ˊO_c I30Sjo"b%߷摔 À<eYs!VF6Z<:oeĠ*GD>ӪRmG);fiC-D mr":g: 4p|ϣjrUȤ ;Z`&pf70|JӼ6\)pghUaxM"`7]b>꾣@5FcFx&6X6Uz7» 0J P2.(17'h qNk {ʎ~D7sN˟[d o?w>_dG$. 5ˇ 8X`4 OαVL ^OЮDIX0N.Ï.w}N7 9\b\)Vq r1u=mq@xPTGxNשׂΑX~'F8ہAFѴ,ri_[,$( ޘNjֵأp^1zm[A 7?ŋ;Lj&zIGsc?,g*r[:q:znM n3:6^YN F%;8Ŗ t% lcefhRYjm_ pfBH3œoF,!m7 6,{90*\ȇ9nJ|ټ,mzhVbDɁ^=X*%lih$ 쇁lK&z{P `02E}r7Is TVk[C >vլ<5" dSsxPP a4R EOМUHGd Vc>Ux_i!0l[A}%*N-x F4ۆNQ աeWR[)਌1˕*UEP æ~fU3* iRu⼩)_@ڐQGG(E ^X aQS^ 2`:y~Z/-wbpA)wsS]Rꗇ 2؉c[u,~0ptm @CȦhXx ]L*v2@TT(_LH0fa튯[ A.\^pSxWx1ECK1a}]s T{0+P+0O<җd}9l l+_C CTsᔐ\%ï'H=ʻ ^̞m {Wv\1bSnƋʣ4厈V槗:wirD%l]Vkaҫƃdx0*Ab^ "*H̕ ۱Op ?I?Ac`e)A/ճfE ioAdٹa!;P2az@|֌/{kj~jB u7BӅ@KwoRK:,P v/Y?,v$`QzRܼ|tT.ה Nd{孹aU>7쏜S-1@'({]:0c,پ jN YZ