diff --git a/mod_auth_openidc-2.4.15.3.tar.gz b/mod_auth_openidc-2.4.15.3.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..2126c4863b8d66a115b249f101829d897ae46767 Binary files /dev/null and b/mod_auth_openidc-2.4.15.3.tar.gz differ diff --git a/mod_auth_openidc.spec b/mod_auth_openidc.spec index 15eb07d2f5c49eb6fd835e37fe0ad9a983393acb..4b44a5befb993e7606d1a83a208f345594b88f8d 100644 --- a/mod_auth_openidc.spec +++ b/mod_auth_openidc.spec @@ -6,15 +6,15 @@ %global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc Name: mod_auth_openidc -Version: 2.4.13.2 +Version: 2.4.15.3 Release: 1 Summary: OpenID Connect Relying Party module for Apache 2.x HTTP Server License: ASL 2.0 -URL: https://github.com/zmartzone/mod_auth_openidc -Source0: https://github.com/zmartzone/mod_auth_openidc/archive/refs/tags/v%{version}.tar.gz +URL: https://github.com/OpenIDC/mod_auth_openidc +Source0: %{url}/releases/download/v%{version}/%{name}-%{version}.tar.gz BuildRequires: gcc httpd-devel openssl-devel curl-devel jansson-devel -BuildRequires: pcre-devel autoconf automake cjose-devel jq-devel +BuildRequires: pcre2-devel autoconf automake cjose-devel jq-devel BuildRequires: libtool Requires: httpd-mmn = %{_httpd_mmn} @@ -60,6 +60,9 @@ install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/{metadata,cache} %dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/{metadata,cache} %changelog +* Sat Feb 17 2024 yaoxin - 2.4.15.3-1 +- Upgrade to 2.4.15.3 for fix CVE-2024-24814 + * Wed Apr 12 2023 yaoxin - 2.4.13.2-1 - Update to 2.4.13.2 to fix CVE-2023-28625 diff --git a/mod_auth_openidc.yaml b/mod_auth_openidc.yaml index f2c87e1d39329c78b5722a1b0abb91ea244126a3..5bb21f38db46c4f04be35ca68c5bdcf114446e11 100644 --- a/mod_auth_openidc.yaml +++ b/mod_auth_openidc.yaml @@ -1,4 +1,4 @@ version_control: github -src_repo: zmartzone/mod_auth_openidc -tag_prefix: ^ +src_repo: OpenIDC/mod_auth_openidc +tag_prefix: ^v seperator: . diff --git a/v2.4.13.2.tar.gz b/v2.4.13.2.tar.gz deleted file mode 100644 index cb142bda548e751d9eab55435fdb2bc2dde97f75..0000000000000000000000000000000000000000 Binary files a/v2.4.13.2.tar.gz and /dev/null differ