packages/mod_auth_openidc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

!30 [sync] PR-27: Update to 2.4.16.11 for fix CVE-2025-31492 and Sync code

Browse Source 
From: @openeuler-sync-bot 
Reviewed-by: @wk333 
Signed-off-by: @wk333
This commit is contained in:
openeuler-ci-bot 2025-04-10 02:58:00 +00:00 committed by Gitee
commit e5404b03e3
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
3 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
mod_auth_openidc-2.4.15.3.tar.gz
View File

Binary file not shown.

BIN
mod_auth_openidc-2.4.16.11.tar.gz Normal file
View File

Binary file not shown.

19
mod_auth_openidc.spec
View File

@ -6,10 +6,10 @@
%global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc
Name: mod_auth_openidc
Version: 2.4.15.3
Version: 2.4.16.11
Release: 1
Summary: OpenID Connect Relying Party module for Apache 2.x HTTP Server
License: ASL 2.0
License: Apache-2.0
URL: https://github.com/OpenIDC/mod_auth_openidc
Source0: %{url}/releases/download/v%{version}/%{name}-%{version}.tar.gz
@ -60,6 +60,21 @@ install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/{metadata,cache}
%dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/{metadata,cache}
%changelog
* Wed Apr 09 2025 yaoxin <1024769339@qq.com> - 2.4.16.11-1
- Update to 2.4.16.11 for fix CVE-2025-31492
* Mon Jan 13 2025 yaoxin <1024769339@qq.com> - 2.4.16.6-1
- Update to 2.4.16.6:
* metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
* info: fix requests to the info hook with extend_session=false
* cookie: OIDCCookieSameSite default behaviour Lax
* cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
* cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
cannot be found on the system upon initaliizing cache mutexes and the file cache
* metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
compatibility with <=2.4.15.7 and to support private/test deployments
* code: address warnings from static code analysis tool CodeChecker
* Sat Feb 17 2024 yaoxin <yao_xin001@hoperun.com> - 2.4.15.3-1
- Upgrade to 2.4.15.3 for fix CVE-2024-24814