Compare commits

..

No commits in common. "e5404b03e3fc6646efa9a07e9f1a99ccf55d1ec4" and "5785d4c7d0b39c0363405c4c1cfd40d84b76d48b" have entirely different histories.

4 changed files with 7 additions and 34 deletions

Binary file not shown.

View File

@ -6,15 +6,15 @@
%global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc
Name: mod_auth_openidc
Version: 2.4.16.11
Version: 2.4.13.2
Release: 1
Summary: OpenID Connect Relying Party module for Apache 2.x HTTP Server
License: Apache-2.0
URL: https://github.com/OpenIDC/mod_auth_openidc
Source0: %{url}/releases/download/v%{version}/%{name}-%{version}.tar.gz
License: ASL 2.0
URL: https://github.com/zmartzone/mod_auth_openidc
Source0: https://github.com/zmartzone/mod_auth_openidc/archive/refs/tags/v%{version}.tar.gz
BuildRequires: gcc httpd-devel openssl-devel curl-devel jansson-devel
BuildRequires: pcre2-devel autoconf automake cjose-devel jq-devel
BuildRequires: pcre-devel autoconf automake cjose-devel jq-devel
BuildRequires: libtool
Requires: httpd-mmn = %{_httpd_mmn}
@ -60,33 +60,6 @@ install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/{metadata,cache}
%dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/{metadata,cache}
%changelog
* Wed Apr 09 2025 yaoxin <1024769339@qq.com> - 2.4.16.11-1
- Update to 2.4.16.11 for fix CVE-2025-31492
* Mon Jan 13 2025 yaoxin <1024769339@qq.com> - 2.4.16.6-1
- Update to 2.4.16.6:
* metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
* info: fix requests to the info hook with extend_session=false
* cookie: OIDCCookieSameSite default behaviour Lax
* cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
* cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
cannot be found on the system upon initaliizing cache mutexes and the file cache
* metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
compatibility with <=2.4.15.7 and to support private/test deployments
* code: address warnings from static code analysis tool CodeChecker
* Sat Feb 17 2024 yaoxin <yao_xin001@hoperun.com> - 2.4.15.3-1
- Upgrade to 2.4.15.3 for fix CVE-2024-24814
* Wed Jan 17 2024 yaoxin <yao_xin001@hoperun.com> - 2.4.15-2
- Port pcre dependency to pcre2
* Tue Jan 16 2024 zhangxingrong <zhangxingrong@uniontech.com> - 2.4.15-1
- upgrade to 2.4.15
* Tue Oct 24 2023 liyanan <liyanan61@h-parners.com> - 2.4.14.3-1
- Update to 2.4.14.3
* Wed Apr 12 2023 yaoxin <yao_xin001@hoperun.com> - 2.4.13.2-1
- Update to 2.4.13.2 to fix CVE-2023-28625

View File

@ -1,4 +1,4 @@
version_control: github
src_repo: OpenIDC/mod_auth_openidc
tag_prefix: ^v
src_repo: zmartzone/mod_auth_openidc
tag_prefix: ^
seperator: .

BIN
v2.4.13.2.tar.gz Normal file

Binary file not shown.